./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 8fc3dc66 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c7caf1796ba4b07248be26f00733894517b89591cbeb4bf07d682989c7001a35 --- Real Ultimate output --- This is Ultimate 0.3.0-?-8fc3dc6-m [2025-03-17 20:24:48,906 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-17 20:24:48,960 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2025-03-17 20:24:48,965 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-17 20:24:48,965 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-17 20:24:48,965 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2025-03-17 20:24:48,981 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-17 20:24:48,982 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-17 20:24:48,982 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-17 20:24:48,982 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-17 20:24:48,983 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-17 20:24:48,983 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-17 20:24:48,983 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-17 20:24:48,984 INFO L153 SettingsManager]: * Use SBE=true [2025-03-17 20:24:48,984 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * Use old map elimination=false [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2025-03-17 20:24:48,985 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * sizeof long=4 [2025-03-17 20:24:48,985 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-17 20:24:48,986 INFO L153 SettingsManager]: * sizeof POINTER=4 [2025-03-17 20:24:48,986 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-17 20:24:48,986 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2025-03-17 20:24:48,986 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2025-03-17 20:24:48,986 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2025-03-17 20:24:48,986 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-03-17 20:24:48,986 INFO L153 SettingsManager]: * sizeof long double=12 [2025-03-17 20:24:48,987 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-17 20:24:48,987 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2025-03-17 20:24:48,987 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-17 20:24:48,987 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-17 20:24:48,987 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-17 20:24:48,987 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-17 20:24:48,987 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-17 20:24:48,987 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-17 20:24:48,987 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2025-03-17 20:24:48,988 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c7caf1796ba4b07248be26f00733894517b89591cbeb4bf07d682989c7001a35 [2025-03-17 20:24:49,226 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-17 20:24:49,233 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-17 20:24:49,235 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-17 20:24:49,236 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-17 20:24:49,236 INFO L274 PluginConnector]: CDTParser initialized [2025-03-17 20:24:49,238 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c [2025-03-17 20:24:50,467 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f02a3357f/0bb71f17717a4ec3b8eaa2b3c1fd1ea9/FLAGba9c5dcb7 [2025-03-17 20:24:50,825 INFO L384 CDTParser]: Found 1 translation units. [2025-03-17 20:24:50,827 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c [2025-03-17 20:24:50,849 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f02a3357f/0bb71f17717a4ec3b8eaa2b3c1fd1ea9/FLAGba9c5dcb7 [2025-03-17 20:24:51,032 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f02a3357f/0bb71f17717a4ec3b8eaa2b3c1fd1ea9 [2025-03-17 20:24:51,035 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-17 20:24:51,036 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-17 20:24:51,037 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-17 20:24:51,037 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-17 20:24:51,042 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-17 20:24:51,043 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,044 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@51c4da3b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51, skipping insertion in model container [2025-03-17 20:24:51,044 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,089 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-17 20:24:51,445 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:24:51,458 INFO L200 MainTranslator]: Completed pre-run [2025-03-17 20:24:51,464 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [48] [2025-03-17 20:24:51,466 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [169] [2025-03-17 20:24:51,466 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [178] [2025-03-17 20:24:51,466 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [363] [2025-03-17 20:24:51,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1035] [2025-03-17 20:24:51,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [1395] [2025-03-17 20:24:51,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [1430] [2025-03-17 20:24:51,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1522] [2025-03-17 20:24:51,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [3050] [2025-03-17 20:24:51,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [3416] [2025-03-17 20:24:51,541 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:24:51,561 INFO L204 MainTranslator]: Completed translation [2025-03-17 20:24:51,562 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51 WrapperNode [2025-03-17 20:24:51,562 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-17 20:24:51,563 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-17 20:24:51,563 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-17 20:24:51,563 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-17 20:24:51,567 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,584 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,765 INFO L138 Inliner]: procedures = 93, calls = 343, calls flagged for inlining = 196, calls inlined = 409, statements flattened = 13565 [2025-03-17 20:24:51,766 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-17 20:24:51,766 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-17 20:24:51,767 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-17 20:24:51,767 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-17 20:24:51,773 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,774 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,795 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,868 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2025-03-17 20:24:51,869 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,870 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,933 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,944 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,959 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,972 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:51,993 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-17 20:24:51,995 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-17 20:24:51,995 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-17 20:24:51,995 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-17 20:24:51,996 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (1/1) ... [2025-03-17 20:24:52,000 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:24:52,009 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:24:52,024 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:24:52,026 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-03-17 20:24:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-03-17 20:24:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-17 20:24:52,045 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-17 20:24:52,252 INFO L256 CfgBuilder]: Building ICFG [2025-03-17 20:24:52,254 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-17 20:24:57,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,236 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,237 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1032-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1594-1: isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-1: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-3: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-5: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-7: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-9: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-11: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-13: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-15: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-17: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-19: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-21: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-23: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-25: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,238 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-27: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-29: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-31: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-33: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,239 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-35: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-37: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-39: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-41: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-43: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-45: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L88-47: getWeight_#res#1 := getWeight_~retValue_acc~0#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L127-1: getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L127-3: getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-1: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-3: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,240 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-5: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,241 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-7: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,241 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-9: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,241 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-11: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,241 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-13: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,241 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-15: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,242 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-17: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,242 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-19: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,242 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-21: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,242 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-23: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,242 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-25: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-27: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-29: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-31: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-33: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-35: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-37: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-39: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-41: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-43: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,243 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-45: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-47: getDestination_#res#1 := getDestination_~retValue_acc~2#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1767-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1767-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1767-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1767-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-1: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-3: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-5: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-7: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-9: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-11: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-13: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-15: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-1: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-17: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-3: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-19: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-5: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-21: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-7: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2304-23: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-9: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-11: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-13: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-15: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-17: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1776-19: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,244 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L721-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1810-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1810-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1810-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1810-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2343-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2343-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2343-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2343-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2377-1: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2377-3: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2377-5: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2377-7: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-1: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-3: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-5: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-7: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-9: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-11: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-13: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-15: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-17: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-19: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-21: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,245 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1859-23: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2433-1: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2433-3: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1392-1: main_#res#1 := main_~retValue_acc~7#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2461-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2461-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1939-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2475-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2475-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2475-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; [2025-03-17 20:24:57,246 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2475-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; [2025-03-17 20:24:57,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1952-1: isIdle_#res#1 := isIdle_~retValue_acc~17#1; [2025-03-17 20:24:57,247 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1427-1: valid_product_#res#1 := valid_product_~retValue_acc~9#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,249 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,250 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,251 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,252 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,253 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-221: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-223: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-225: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-227: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-229: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-231: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-233: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-235: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-237: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-239: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,254 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-241: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,255 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-243: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,255 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-245: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,255 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-247: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,255 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-249: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,255 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-251: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,255 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L481-253: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-17 20:24:57,892 INFO L? ?]: Removed 5889 outVars from TransFormulas that were not future-live. [2025-03-17 20:24:57,892 INFO L307 CfgBuilder]: Performing block encoding [2025-03-17 20:24:57,944 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-17 20:24:57,947 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2025-03-17 20:24:57,947 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:24:57 BoogieIcfgContainer [2025-03-17 20:24:57,947 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-17 20:24:57,948 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2025-03-17 20:24:57,948 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2025-03-17 20:24:57,952 INFO L274 PluginConnector]: BuchiAutomizer initialized [2025-03-17 20:24:57,952 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:24:57,952 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.03 08:24:51" (1/3) ... [2025-03-17 20:24:57,953 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@541e775f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:24:57, skipping insertion in model container [2025-03-17 20:24:57,953 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:24:57,953 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:24:51" (2/3) ... [2025-03-17 20:24:57,953 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@541e775f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:24:57, skipping insertion in model container [2025-03-17 20:24:57,953 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:24:57,954 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:24:57" (3/3) ... [2025-03-17 20:24:57,954 INFO L363 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product29.cil.c [2025-03-17 20:24:58,027 INFO L306 stractBuchiCegarLoop]: Interprodecural is true [2025-03-17 20:24:58,027 INFO L307 stractBuchiCegarLoop]: Hoare is None [2025-03-17 20:24:58,027 INFO L308 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2025-03-17 20:24:58,028 INFO L309 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2025-03-17 20:24:58,028 INFO L310 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2025-03-17 20:24:58,028 INFO L311 stractBuchiCegarLoop]: Difference is false [2025-03-17 20:24:58,028 INFO L312 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2025-03-17 20:24:58,028 INFO L316 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2025-03-17 20:24:58,040 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3561 states, 3560 states have (on average 1.8890449438202248) internal successors, (6725), 3560 states have internal predecessors, (6725), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:58,118 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1742 [2025-03-17 20:24:58,118 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:58,118 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:58,136 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:58,136 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:58,136 INFO L338 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2025-03-17 20:24:58,144 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3561 states, 3560 states have (on average 1.8890449438202248) internal successors, (6725), 3560 states have internal predecessors, (6725), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:58,182 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1742 [2025-03-17 20:24:58,182 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:58,183 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:58,187 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:58,187 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:58,195 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:24:58,196 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:24:58,200 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:58,201 INFO L85 PathProgramCache]: Analyzing trace with hash 1165475410, now seen corresponding path program 1 times [2025-03-17 20:24:58,208 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:58,209 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [587091144] [2025-03-17 20:24:58,209 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:58,209 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:58,286 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 48 statements into 1 equivalence classes. [2025-03-17 20:24:58,343 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 48 of 48 statements. [2025-03-17 20:24:58,343 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:58,343 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:58,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:58,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:58,587 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [587091144] [2025-03-17 20:24:58,587 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [587091144] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:58,587 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:58,587 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:58,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [512724336] [2025-03-17 20:24:58,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:58,592 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:58,594 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:58,594 INFO L85 PathProgramCache]: Analyzing trace with hash -1234203630, now seen corresponding path program 1 times [2025-03-17 20:24:58,594 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:58,594 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974912942] [2025-03-17 20:24:58,594 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:58,594 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:58,615 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 37 statements into 1 equivalence classes. [2025-03-17 20:24:58,627 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 37 of 37 statements. [2025-03-17 20:24:58,627 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:58,627 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:58,718 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:58,719 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:58,719 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974912942] [2025-03-17 20:24:58,719 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974912942] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:58,719 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:58,719 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:58,720 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [893322082] [2025-03-17 20:24:58,720 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:58,720 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:58,721 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:58,739 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:58,740 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:58,749 INFO L87 Difference]: Start difference. First operand has 3561 states, 3560 states have (on average 1.8890449438202248) internal successors, (6725), 3560 states have internal predecessors, (6725), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:59,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:24:59,307 INFO L93 Difference]: Finished difference Result 3579 states and 6737 transitions. [2025-03-17 20:24:59,308 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 3579 states and 6737 transitions. [2025-03-17 20:24:59,336 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1751 [2025-03-17 20:24:59,363 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 3579 states to 3568 states and 6723 transitions. [2025-03-17 20:24:59,364 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 3568 [2025-03-17 20:24:59,370 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 3568 [2025-03-17 20:24:59,371 INFO L73 IsDeterministic]: Start isDeterministic. Operand 3568 states and 6723 transitions. [2025-03-17 20:24:59,380 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:24:59,380 INFO L218 hiAutomatonCegarLoop]: Abstraction has 3568 states and 6723 transitions. [2025-03-17 20:24:59,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3568 states and 6723 transitions. [2025-03-17 20:24:59,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3568 to 3560. [2025-03-17 20:24:59,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3560 states, 3560 states have (on average 1.8862359550561798) internal successors, (6715), 3559 states have internal predecessors, (6715), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:24:59,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3560 states to 3560 states and 6715 transitions. [2025-03-17 20:24:59,509 INFO L240 hiAutomatonCegarLoop]: Abstraction has 3560 states and 6715 transitions. [2025-03-17 20:24:59,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:24:59,513 INFO L432 stractBuchiCegarLoop]: Abstraction has 3560 states and 6715 transitions. [2025-03-17 20:24:59,515 INFO L338 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2025-03-17 20:24:59,515 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3560 states and 6715 transitions. [2025-03-17 20:24:59,532 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1747 [2025-03-17 20:24:59,533 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:24:59,533 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:24:59,537 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:59,538 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:24:59,538 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:24:59,539 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:24:59,540 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:59,540 INFO L85 PathProgramCache]: Analyzing trace with hash 1126024780, now seen corresponding path program 1 times [2025-03-17 20:24:59,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:59,540 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7852914] [2025-03-17 20:24:59,540 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:59,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:59,561 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 52 statements into 1 equivalence classes. [2025-03-17 20:24:59,566 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-17 20:24:59,566 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:59,566 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:59,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:59,685 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:59,685 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7852914] [2025-03-17 20:24:59,685 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7852914] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:59,685 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:59,686 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:24:59,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [474558466] [2025-03-17 20:24:59,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:59,686 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:24:59,687 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:24:59,687 INFO L85 PathProgramCache]: Analyzing trace with hash -367837748, now seen corresponding path program 1 times [2025-03-17 20:24:59,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:24:59,689 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1858922415] [2025-03-17 20:24:59,689 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:24:59,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:24:59,705 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 41 statements into 1 equivalence classes. [2025-03-17 20:24:59,711 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 41 of 41 statements. [2025-03-17 20:24:59,711 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:24:59,711 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:24:59,782 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:24:59,783 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:24:59,783 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1858922415] [2025-03-17 20:24:59,783 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1858922415] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:24:59,783 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:24:59,784 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:24:59,784 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1149540530] [2025-03-17 20:24:59,784 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:24:59,784 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:24:59,784 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:24:59,784 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:24:59,785 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:24:59,785 INFO L87 Difference]: Start difference. First operand 3560 states and 6715 transitions. cyclomatic complexity: 3156 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:00,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:00,793 INFO L93 Difference]: Finished difference Result 4471 states and 8259 transitions. [2025-03-17 20:25:00,793 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4471 states and 8259 transitions. [2025-03-17 20:25:00,825 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3063 [2025-03-17 20:25:00,848 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4471 states to 4471 states and 8259 transitions. [2025-03-17 20:25:00,849 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4471 [2025-03-17 20:25:00,854 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4471 [2025-03-17 20:25:00,854 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4471 states and 8259 transitions. [2025-03-17 20:25:00,862 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:00,862 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4471 states and 8259 transitions. [2025-03-17 20:25:00,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4471 states and 8259 transitions. [2025-03-17 20:25:00,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4471 to 4462. [2025-03-17 20:25:00,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4462 states, 4462 states have (on average 1.8476019722097714) internal successors, (8244), 4461 states have internal predecessors, (8244), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:00,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4462 states to 4462 states and 8244 transitions. [2025-03-17 20:25:00,945 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4462 states and 8244 transitions. [2025-03-17 20:25:00,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:00,946 INFO L432 stractBuchiCegarLoop]: Abstraction has 4462 states and 8244 transitions. [2025-03-17 20:25:00,946 INFO L338 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2025-03-17 20:25:00,946 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4462 states and 8244 transitions. [2025-03-17 20:25:00,965 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3054 [2025-03-17 20:25:00,966 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:00,966 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:00,970 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:00,970 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:00,970 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:00,971 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;" "stopRequestedAtCurrentFloor_#t~ret60#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:00,971 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:00,971 INFO L85 PathProgramCache]: Analyzing trace with hash -1913646075, now seen corresponding path program 1 times [2025-03-17 20:25:00,972 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:00,972 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [593275391] [2025-03-17 20:25:00,972 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:00,972 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:00,986 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:25:00,991 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:25:00,991 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:00,992 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:01,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:01,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:01,061 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [593275391] [2025-03-17 20:25:01,061 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [593275391] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:01,061 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:01,061 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:01,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1113974637] [2025-03-17 20:25:01,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:01,062 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:01,062 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:01,062 INFO L85 PathProgramCache]: Analyzing trace with hash -394810880, now seen corresponding path program 1 times [2025-03-17 20:25:01,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:01,062 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [371109096] [2025-03-17 20:25:01,062 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:01,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:01,074 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 42 statements into 1 equivalence classes. [2025-03-17 20:25:01,080 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 42 of 42 statements. [2025-03-17 20:25:01,080 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:01,080 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:01,130 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:01,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:01,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [371109096] [2025-03-17 20:25:01,130 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [371109096] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:01,130 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:01,130 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:01,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1942416577] [2025-03-17 20:25:01,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:01,131 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:01,131 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:01,131 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:01,131 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:01,131 INFO L87 Difference]: Start difference. First operand 4462 states and 8244 transitions. cyclomatic complexity: 3783 Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:02,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:02,687 INFO L93 Difference]: Finished difference Result 7073 states and 12996 transitions. [2025-03-17 20:25:02,687 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7073 states and 12996 transitions. [2025-03-17 20:25:02,715 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5669 [2025-03-17 20:25:02,749 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7073 states to 7073 states and 12996 transitions. [2025-03-17 20:25:02,749 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7073 [2025-03-17 20:25:02,756 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7073 [2025-03-17 20:25:02,756 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7073 states and 12996 transitions. [2025-03-17 20:25:02,766 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:02,766 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7073 states and 12996 transitions. [2025-03-17 20:25:02,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7073 states and 12996 transitions. [2025-03-17 20:25:02,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7073 to 6330. [2025-03-17 20:25:02,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6330 states, 6330 states have (on average 1.8557661927330174) internal successors, (11747), 6329 states have internal predecessors, (11747), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:02,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6330 states to 6330 states and 11747 transitions. [2025-03-17 20:25:02,889 INFO L240 hiAutomatonCegarLoop]: Abstraction has 6330 states and 11747 transitions. [2025-03-17 20:25:02,890 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:02,890 INFO L432 stractBuchiCegarLoop]: Abstraction has 6330 states and 11747 transitions. [2025-03-17 20:25:02,890 INFO L338 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2025-03-17 20:25:02,890 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6330 states and 11747 transitions. [2025-03-17 20:25:02,909 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4926 [2025-03-17 20:25:02,910 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:02,910 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:02,915 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:02,915 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:02,915 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:02,916 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:02,916 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:02,916 INFO L85 PathProgramCache]: Analyzing trace with hash -1913646075, now seen corresponding path program 2 times [2025-03-17 20:25:02,916 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:02,917 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1497202308] [2025-03-17 20:25:02,917 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:02,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:02,934 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:25:02,937 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:25:02,938 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:02,938 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:03,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:03,005 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:03,005 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1497202308] [2025-03-17 20:25:03,005 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1497202308] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:03,005 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:03,005 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:03,005 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077090638] [2025-03-17 20:25:03,005 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:03,006 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:03,006 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:03,006 INFO L85 PathProgramCache]: Analyzing trace with hash -1836893167, now seen corresponding path program 1 times [2025-03-17 20:25:03,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:03,006 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388172001] [2025-03-17 20:25:03,006 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:03,006 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:03,020 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 42 statements into 1 equivalence classes. [2025-03-17 20:25:03,023 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 42 of 42 statements. [2025-03-17 20:25:03,023 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:03,024 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:03,100 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:03,100 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:03,101 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388172001] [2025-03-17 20:25:03,101 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [388172001] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:03,101 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:03,101 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:03,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1413434750] [2025-03-17 20:25:03,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:03,101 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:03,101 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:03,101 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:03,102 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:03,102 INFO L87 Difference]: Start difference. First operand 6330 states and 11747 transitions. cyclomatic complexity: 5418 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:03,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:03,776 INFO L93 Difference]: Finished difference Result 10604 states and 19595 transitions. [2025-03-17 20:25:03,776 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10604 states and 19595 transitions. [2025-03-17 20:25:03,812 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9174 [2025-03-17 20:25:03,859 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10604 states to 10578 states and 19569 transitions. [2025-03-17 20:25:03,859 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10578 [2025-03-17 20:25:03,873 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10578 [2025-03-17 20:25:03,874 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10578 states and 19569 transitions. [2025-03-17 20:25:03,891 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:03,891 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10578 states and 19569 transitions. [2025-03-17 20:25:03,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10578 states and 19569 transitions. [2025-03-17 20:25:04,018 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10578 to 10569. [2025-03-17 20:25:04,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10569 states, 10569 states have (on average 1.8501277320465512) internal successors, (19554), 10568 states have internal predecessors, (19554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:04,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10569 states to 10569 states and 19554 transitions. [2025-03-17 20:25:04,140 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10569 states and 19554 transitions. [2025-03-17 20:25:04,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:04,141 INFO L432 stractBuchiCegarLoop]: Abstraction has 10569 states and 19554 transitions. [2025-03-17 20:25:04,141 INFO L338 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2025-03-17 20:25:04,141 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10569 states and 19554 transitions. [2025-03-17 20:25:04,175 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9165 [2025-03-17 20:25:04,175 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:04,175 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:04,180 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:04,180 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:04,180 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:04,181 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;" "stopRequestedAtCurrentFloor_#t~ret60#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:04,181 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:04,181 INFO L85 PathProgramCache]: Analyzing trace with hash -1913646075, now seen corresponding path program 3 times [2025-03-17 20:25:04,181 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:04,181 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1846755358] [2025-03-17 20:25:04,181 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:25:04,181 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:04,206 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:25:04,210 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:25:04,210 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:25:04,210 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:04,253 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:04,253 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:04,253 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1846755358] [2025-03-17 20:25:04,253 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1846755358] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:04,253 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:04,253 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:04,253 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1073554911] [2025-03-17 20:25:04,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:04,254 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:04,254 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:04,254 INFO L85 PathProgramCache]: Analyzing trace with hash 731588050, now seen corresponding path program 1 times [2025-03-17 20:25:04,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:04,254 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [194147430] [2025-03-17 20:25:04,254 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:04,254 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:04,265 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:25:04,268 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:25:04,269 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:04,270 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:04,324 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:04,324 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:04,324 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [194147430] [2025-03-17 20:25:04,324 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [194147430] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:04,324 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:04,324 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:04,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845116682] [2025-03-17 20:25:04,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:04,325 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:04,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:04,325 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-17 20:25:04,325 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-17 20:25:04,326 INFO L87 Difference]: Start difference. First operand 10569 states and 19554 transitions. cyclomatic complexity: 8986 Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 6 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:05,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:05,890 INFO L93 Difference]: Finished difference Result 10596 states and 19435 transitions. [2025-03-17 20:25:05,890 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10596 states and 19435 transitions. [2025-03-17 20:25:05,933 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9189 [2025-03-17 20:25:05,967 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10596 states to 10596 states and 19435 transitions. [2025-03-17 20:25:05,967 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10596 [2025-03-17 20:25:05,982 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10596 [2025-03-17 20:25:05,982 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10596 states and 19435 transitions. [2025-03-17 20:25:05,993 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:05,994 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10596 states and 19435 transitions. [2025-03-17 20:25:06,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10596 states and 19435 transitions. [2025-03-17 20:25:06,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10596 to 10596. [2025-03-17 20:25:06,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10596 states, 10596 states have (on average 1.834182710456776) internal successors, (19435), 10595 states have internal predecessors, (19435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:06,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10596 states to 10596 states and 19435 transitions. [2025-03-17 20:25:06,139 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10596 states and 19435 transitions. [2025-03-17 20:25:06,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:25:06,141 INFO L432 stractBuchiCegarLoop]: Abstraction has 10596 states and 19435 transitions. [2025-03-17 20:25:06,141 INFO L338 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2025-03-17 20:25:06,141 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10596 states and 19435 transitions. [2025-03-17 20:25:06,167 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9189 [2025-03-17 20:25:06,167 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:06,167 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:06,171 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:06,171 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:06,171 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:06,171 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:06,172 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:06,172 INFO L85 PathProgramCache]: Analyzing trace with hash -1913646075, now seen corresponding path program 4 times [2025-03-17 20:25:06,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:06,172 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1021844131] [2025-03-17 20:25:06,172 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-17 20:25:06,172 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:06,190 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 56 statements into 2 equivalence classes. [2025-03-17 20:25:06,191 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 55 of 56 statements. [2025-03-17 20:25:06,191 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-17 20:25:06,191 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:06,218 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:06,218 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:06,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1021844131] [2025-03-17 20:25:06,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1021844131] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:06,218 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:06,218 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:06,218 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [948920224] [2025-03-17 20:25:06,218 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:06,219 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:06,219 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:06,219 INFO L85 PathProgramCache]: Analyzing trace with hash 1219284113, now seen corresponding path program 1 times [2025-03-17 20:25:06,219 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:06,219 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1147933641] [2025-03-17 20:25:06,219 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:06,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:06,229 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:25:06,232 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:25:06,232 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:06,232 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:06,295 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:06,296 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:06,296 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1147933641] [2025-03-17 20:25:06,296 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1147933641] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:06,296 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:06,296 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:06,297 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [851417382] [2025-03-17 20:25:06,297 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:06,297 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:06,297 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:06,297 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:06,297 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:06,297 INFO L87 Difference]: Start difference. First operand 10596 states and 19435 transitions. cyclomatic complexity: 8840 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:06,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:06,996 INFO L93 Difference]: Finished difference Result 18881 states and 34638 transitions. [2025-03-17 20:25:06,997 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18881 states and 34638 transitions. [2025-03-17 20:25:07,067 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17412 [2025-03-17 20:25:07,136 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18881 states to 18819 states and 34570 transitions. [2025-03-17 20:25:07,136 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18819 [2025-03-17 20:25:07,153 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18819 [2025-03-17 20:25:07,153 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18819 states and 34570 transitions. [2025-03-17 20:25:07,172 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:07,172 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18819 states and 34570 transitions. [2025-03-17 20:25:07,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18819 states and 34570 transitions. [2025-03-17 20:25:07,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18819 to 12948. [2025-03-17 20:25:07,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12948 states, 12948 states have (on average 1.829857893110905) internal successors, (23693), 12947 states have internal predecessors, (23693), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:07,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12948 states to 12948 states and 23693 transitions. [2025-03-17 20:25:07,357 INFO L240 hiAutomatonCegarLoop]: Abstraction has 12948 states and 23693 transitions. [2025-03-17 20:25:07,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:07,360 INFO L432 stractBuchiCegarLoop]: Abstraction has 12948 states and 23693 transitions. [2025-03-17 20:25:07,360 INFO L338 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2025-03-17 20:25:07,360 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12948 states and 23693 transitions. [2025-03-17 20:25:07,397 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11541 [2025-03-17 20:25:07,398 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:07,398 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:07,402 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:07,402 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:07,403 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:07,403 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:07,403 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:07,403 INFO L85 PathProgramCache]: Analyzing trace with hash -1913646075, now seen corresponding path program 5 times [2025-03-17 20:25:07,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:07,404 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1363784533] [2025-03-17 20:25:07,404 INFO L95 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2025-03-17 20:25:07,404 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:07,480 INFO L108 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:25:07,486 INFO L111 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:25:07,487 INFO L114 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:07,487 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:07,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:07,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:07,543 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1363784533] [2025-03-17 20:25:07,543 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1363784533] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:07,543 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:07,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:07,545 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25521393] [2025-03-17 20:25:07,545 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:07,545 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:07,546 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:07,546 INFO L85 PathProgramCache]: Analyzing trace with hash 1107929032, now seen corresponding path program 1 times [2025-03-17 20:25:07,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:07,546 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501195782] [2025-03-17 20:25:07,546 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:07,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:07,556 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:25:07,559 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:25:07,559 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:07,559 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:07,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:07,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:07,608 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501195782] [2025-03-17 20:25:07,608 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [501195782] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:07,608 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:07,608 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:07,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2130225324] [2025-03-17 20:25:07,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:07,609 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:07,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:07,609 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:07,609 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:07,609 INFO L87 Difference]: Start difference. First operand 12948 states and 23693 transitions. cyclomatic complexity: 10746 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:07,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:07,909 INFO L93 Difference]: Finished difference Result 13258 states and 24045 transitions. [2025-03-17 20:25:07,909 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13258 states and 24045 transitions. [2025-03-17 20:25:07,967 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11810 [2025-03-17 20:25:08,013 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13258 states to 13258 states and 24045 transitions. [2025-03-17 20:25:08,013 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13258 [2025-03-17 20:25:08,027 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13258 [2025-03-17 20:25:08,027 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13258 states and 24045 transitions. [2025-03-17 20:25:08,040 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:08,041 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13258 states and 24045 transitions. [2025-03-17 20:25:08,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13258 states and 24045 transitions. [2025-03-17 20:25:08,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13258 to 13123. [2025-03-17 20:25:08,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13123 states, 13123 states have (on average 1.8186390307094413) internal successors, (23866), 13122 states have internal predecessors, (23866), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:08,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13123 states to 13123 states and 23866 transitions. [2025-03-17 20:25:08,263 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13123 states and 23866 transitions. [2025-03-17 20:25:08,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:25:08,266 INFO L432 stractBuchiCegarLoop]: Abstraction has 13123 states and 23866 transitions. [2025-03-17 20:25:08,266 INFO L338 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2025-03-17 20:25:08,266 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13123 states and 23866 transitions. [2025-03-17 20:25:08,301 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11686 [2025-03-17 20:25:08,302 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:08,302 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:08,306 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:08,307 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:08,307 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:08,307 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret46#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret46#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret46#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:08,308 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:08,308 INFO L85 PathProgramCache]: Analyzing trace with hash 124005200, now seen corresponding path program 1 times [2025-03-17 20:25:08,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:08,308 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1561327414] [2025-03-17 20:25:08,308 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:08,309 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:08,324 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:25:08,327 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:25:08,327 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:08,328 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:08,364 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:08,364 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:08,364 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1561327414] [2025-03-17 20:25:08,365 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1561327414] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:08,365 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:08,365 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:08,365 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1449796837] [2025-03-17 20:25:08,365 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:08,365 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:08,365 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:08,365 INFO L85 PathProgramCache]: Analyzing trace with hash -23310987, now seen corresponding path program 1 times [2025-03-17 20:25:08,365 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:08,365 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1430045599] [2025-03-17 20:25:08,365 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:08,365 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:08,377 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:25:08,380 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:25:08,381 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:08,381 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:08,427 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:08,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:08,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1430045599] [2025-03-17 20:25:08,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1430045599] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:08,427 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:08,427 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:08,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1028647986] [2025-03-17 20:25:08,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:08,429 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:08,429 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:08,429 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:08,430 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:08,430 INFO L87 Difference]: Start difference. First operand 13123 states and 23866 transitions. cyclomatic complexity: 10744 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:08,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:08,788 INFO L93 Difference]: Finished difference Result 23939 states and 43736 transitions. [2025-03-17 20:25:08,788 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23939 states and 43736 transitions. [2025-03-17 20:25:08,903 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22260 [2025-03-17 20:25:08,989 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23939 states to 23926 states and 43715 transitions. [2025-03-17 20:25:08,990 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23926 [2025-03-17 20:25:09,009 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23926 [2025-03-17 20:25:09,010 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23926 states and 43715 transitions. [2025-03-17 20:25:09,034 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:09,034 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23926 states and 43715 transitions. [2025-03-17 20:25:09,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23926 states and 43715 transitions. [2025-03-17 20:25:09,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23926 to 23909. [2025-03-17 20:25:09,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23909 states, 23909 states have (on average 1.8275126521393616) internal successors, (43694), 23908 states have internal predecessors, (43694), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:09,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23909 states to 23909 states and 43694 transitions. [2025-03-17 20:25:09,360 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23909 states and 43694 transitions. [2025-03-17 20:25:09,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:09,363 INFO L432 stractBuchiCegarLoop]: Abstraction has 23909 states and 43694 transitions. [2025-03-17 20:25:09,364 INFO L338 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2025-03-17 20:25:09,364 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23909 states and 43694 transitions. [2025-03-17 20:25:09,441 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22245 [2025-03-17 20:25:09,441 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:09,441 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:09,446 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:09,447 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:09,447 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:09,448 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume 3 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_3~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:09,449 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:09,449 INFO L85 PathProgramCache]: Analyzing trace with hash 1931459663, now seen corresponding path program 1 times [2025-03-17 20:25:09,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:09,449 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [511966100] [2025-03-17 20:25:09,449 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:09,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:09,468 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:25:09,472 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:25:09,473 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:09,473 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:09,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:09,524 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:09,524 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [511966100] [2025-03-17 20:25:09,524 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [511966100] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:09,524 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:09,524 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:09,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772368720] [2025-03-17 20:25:09,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:09,525 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:09,525 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:09,525 INFO L85 PathProgramCache]: Analyzing trace with hash -1471213002, now seen corresponding path program 1 times [2025-03-17 20:25:09,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:09,525 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1015162238] [2025-03-17 20:25:09,525 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:09,526 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:09,624 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 44 statements into 1 equivalence classes. [2025-03-17 20:25:09,628 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 44 of 44 statements. [2025-03-17 20:25:09,629 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:09,629 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:09,679 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:09,680 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:09,680 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1015162238] [2025-03-17 20:25:09,680 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1015162238] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:09,680 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:09,680 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:09,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349370841] [2025-03-17 20:25:09,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:09,681 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:09,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:09,681 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:09,681 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:09,681 INFO L87 Difference]: Start difference. First operand 23909 states and 43694 transitions. cyclomatic complexity: 19789 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:10,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:10,481 INFO L93 Difference]: Finished difference Result 44513 states and 81546 transitions. [2025-03-17 20:25:10,481 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44513 states and 81546 transitions. [2025-03-17 20:25:10,652 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 42684 [2025-03-17 20:25:10,798 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44513 states to 44348 states and 81352 transitions. [2025-03-17 20:25:10,798 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44348 [2025-03-17 20:25:11,002 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44348 [2025-03-17 20:25:11,002 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44348 states and 81352 transitions. [2025-03-17 20:25:11,024 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:11,024 INFO L218 hiAutomatonCegarLoop]: Abstraction has 44348 states and 81352 transitions. [2025-03-17 20:25:11,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44348 states and 81352 transitions. [2025-03-17 20:25:11,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44348 to 28594. [2025-03-17 20:25:11,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28594 states, 28594 states have (on average 1.8244037210603623) internal successors, (52167), 28593 states have internal predecessors, (52167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:11,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28594 states to 28594 states and 52167 transitions. [2025-03-17 20:25:11,334 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28594 states and 52167 transitions. [2025-03-17 20:25:11,335 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:11,335 INFO L432 stractBuchiCegarLoop]: Abstraction has 28594 states and 52167 transitions. [2025-03-17 20:25:11,335 INFO L338 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2025-03-17 20:25:11,336 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28594 states and 52167 transitions. [2025-03-17 20:25:11,521 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26930 [2025-03-17 20:25:11,521 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:11,521 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:11,527 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:11,527 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:11,527 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:11,528 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume 4 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_4~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:11,528 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:11,528 INFO L85 PathProgramCache]: Analyzing trace with hash 1931459663, now seen corresponding path program 2 times [2025-03-17 20:25:11,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:11,528 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1426451245] [2025-03-17 20:25:11,528 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:11,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:11,544 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:25:11,547 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:25:11,548 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:11,548 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:11,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:11,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:11,587 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1426451245] [2025-03-17 20:25:11,587 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1426451245] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:11,587 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:11,587 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:11,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1742745606] [2025-03-17 20:25:11,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:11,587 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:11,588 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:11,588 INFO L85 PathProgramCache]: Analyzing trace with hash -1919989930, now seen corresponding path program 1 times [2025-03-17 20:25:11,588 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:11,588 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [572880469] [2025-03-17 20:25:11,588 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:11,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:11,598 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:25:11,601 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:25:11,601 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:11,601 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:11,659 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:11,660 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:11,660 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [572880469] [2025-03-17 20:25:11,660 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [572880469] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:11,660 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:11,660 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:11,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1786740116] [2025-03-17 20:25:11,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:11,660 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:11,661 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:11,661 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:11,661 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:11,661 INFO L87 Difference]: Start difference. First operand 28594 states and 52167 transitions. cyclomatic complexity: 23577 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:12,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:12,684 INFO L93 Difference]: Finished difference Result 53843 states and 98413 transitions. [2025-03-17 20:25:12,684 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53843 states and 98413 transitions. [2025-03-17 20:25:13,064 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 51924 [2025-03-17 20:25:13,231 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53843 states to 53588 states and 98120 transitions. [2025-03-17 20:25:13,232 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53588 [2025-03-17 20:25:13,281 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53588 [2025-03-17 20:25:13,282 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53588 states and 98120 transitions. [2025-03-17 20:25:13,320 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:13,320 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53588 states and 98120 transitions. [2025-03-17 20:25:13,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53588 states and 98120 transitions. [2025-03-17 20:25:13,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53588 to 33496. [2025-03-17 20:25:13,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33496 states, 33496 states have (on average 1.820456173871507) internal successors, (60978), 33495 states have internal predecessors, (60978), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:13,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33496 states to 33496 states and 60978 transitions. [2025-03-17 20:25:13,705 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33496 states and 60978 transitions. [2025-03-17 20:25:13,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:13,706 INFO L432 stractBuchiCegarLoop]: Abstraction has 33496 states and 60978 transitions. [2025-03-17 20:25:13,706 INFO L338 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2025-03-17 20:25:13,706 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33496 states and 60978 transitions. [2025-03-17 20:25:13,789 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 31832 [2025-03-17 20:25:13,789 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:13,789 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:13,794 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:13,794 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:13,794 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:13,795 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:13,797 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:13,797 INFO L85 PathProgramCache]: Analyzing trace with hash 1931459663, now seen corresponding path program 3 times [2025-03-17 20:25:13,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:13,797 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1511225624] [2025-03-17 20:25:13,797 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:25:13,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:13,809 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:25:13,811 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:25:13,812 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:25:13,812 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:13,839 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:13,839 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:13,839 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1511225624] [2025-03-17 20:25:13,839 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1511225624] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:13,839 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:13,839 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:13,840 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1366491290] [2025-03-17 20:25:13,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:13,840 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:13,840 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:13,840 INFO L85 PathProgramCache]: Analyzing trace with hash -533786536, now seen corresponding path program 1 times [2025-03-17 20:25:13,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:13,840 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [746253846] [2025-03-17 20:25:13,840 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:13,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:13,849 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:25:13,851 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:25:13,851 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:13,851 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:13,861 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:13,861 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:13,861 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [746253846] [2025-03-17 20:25:13,861 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [746253846] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:13,861 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:13,861 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:13,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1004965640] [2025-03-17 20:25:13,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:13,862 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:13,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:13,862 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:25:13,862 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:25:13,862 INFO L87 Difference]: Start difference. First operand 33496 states and 60978 transitions. cyclomatic complexity: 27486 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:14,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:14,614 INFO L93 Difference]: Finished difference Result 48503 states and 88699 transitions. [2025-03-17 20:25:14,614 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48503 states and 88699 transitions. [2025-03-17 20:25:14,796 INFO L131 ngComponentsAnalysis]: Automaton has 15 accepting balls. 46678 [2025-03-17 20:25:14,939 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48503 states to 48370 states and 88524 transitions. [2025-03-17 20:25:14,939 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48370 [2025-03-17 20:25:14,975 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48370 [2025-03-17 20:25:14,976 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48370 states and 88524 transitions. [2025-03-17 20:25:15,009 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:15,009 INFO L218 hiAutomatonCegarLoop]: Abstraction has 48370 states and 88524 transitions. [2025-03-17 20:25:15,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48370 states and 88524 transitions. [2025-03-17 20:25:15,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48370 to 36968. [2025-03-17 20:25:15,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36968 states, 36968 states have (on average 1.818626920579961) internal successors, (67231), 36967 states have internal predecessors, (67231), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:15,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36968 states to 36968 states and 67231 transitions. [2025-03-17 20:25:15,510 INFO L240 hiAutomatonCegarLoop]: Abstraction has 36968 states and 67231 transitions. [2025-03-17 20:25:15,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:25:15,510 INFO L432 stractBuchiCegarLoop]: Abstraction has 36968 states and 67231 transitions. [2025-03-17 20:25:15,510 INFO L338 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2025-03-17 20:25:15,510 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 36968 states and 67231 transitions. [2025-03-17 20:25:15,612 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 35285 [2025-03-17 20:25:15,612 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:15,612 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:15,620 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:15,620 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:15,620 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:15,621 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret46#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret46#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret46#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:15,621 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:15,621 INFO L85 PathProgramCache]: Analyzing trace with hash 1931459663, now seen corresponding path program 4 times [2025-03-17 20:25:15,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:15,621 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1701041190] [2025-03-17 20:25:15,621 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-17 20:25:15,621 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:15,634 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 57 statements into 2 equivalence classes. [2025-03-17 20:25:15,635 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 56 of 57 statements. [2025-03-17 20:25:15,635 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-17 20:25:15,635 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:15,650 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:15,650 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:15,651 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1701041190] [2025-03-17 20:25:15,651 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1701041190] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:15,651 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:15,651 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:15,651 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [801853324] [2025-03-17 20:25:15,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:15,651 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:15,651 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:15,651 INFO L85 PathProgramCache]: Analyzing trace with hash 1914802415, now seen corresponding path program 1 times [2025-03-17 20:25:15,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:15,652 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896239461] [2025-03-17 20:25:15,652 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:15,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:15,661 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:25:15,664 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:25:15,664 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:15,664 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:15,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:15,697 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:15,697 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896239461] [2025-03-17 20:25:15,698 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896239461] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:15,698 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:15,698 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:15,698 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849769257] [2025-03-17 20:25:15,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:15,698 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:15,698 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:15,699 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:15,699 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:15,699 INFO L87 Difference]: Start difference. First operand 36968 states and 67231 transitions. cyclomatic complexity: 30269 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:16,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:16,637 INFO L93 Difference]: Finished difference Result 38350 states and 69617 transitions. [2025-03-17 20:25:16,637 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38350 states and 69617 transitions. [2025-03-17 20:25:16,787 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 36645 [2025-03-17 20:25:17,078 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38350 states to 38328 states and 69581 transitions. [2025-03-17 20:25:17,078 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38328 [2025-03-17 20:25:17,129 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38328 [2025-03-17 20:25:17,129 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38328 states and 69581 transitions. [2025-03-17 20:25:17,170 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:17,170 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38328 states and 69581 transitions. [2025-03-17 20:25:17,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38328 states and 69581 transitions. [2025-03-17 20:25:17,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38328 to 37324. [2025-03-17 20:25:17,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37324 states, 37324 states have (on average 1.8146232986818134) internal successors, (67729), 37323 states have internal predecessors, (67729), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:17,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37324 states to 37324 states and 67729 transitions. [2025-03-17 20:25:17,688 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37324 states and 67729 transitions. [2025-03-17 20:25:17,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:17,689 INFO L432 stractBuchiCegarLoop]: Abstraction has 37324 states and 67729 transitions. [2025-03-17 20:25:17,689 INFO L338 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2025-03-17 20:25:17,689 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37324 states and 67729 transitions. [2025-03-17 20:25:17,794 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35641 [2025-03-17 20:25:17,794 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:17,794 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:17,801 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:17,801 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:17,801 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:17,802 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:17,802 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:17,802 INFO L85 PathProgramCache]: Analyzing trace with hash 1931459663, now seen corresponding path program 5 times [2025-03-17 20:25:17,802 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:17,802 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [375287023] [2025-03-17 20:25:17,803 INFO L95 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2025-03-17 20:25:17,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:17,818 INFO L108 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:25:17,822 INFO L111 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:25:17,822 INFO L114 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:17,822 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:17,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:17,858 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:17,858 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [375287023] [2025-03-17 20:25:17,858 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [375287023] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:17,858 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:17,858 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:17,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [198692745] [2025-03-17 20:25:17,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:17,859 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:17,859 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:17,859 INFO L85 PathProgramCache]: Analyzing trace with hash 270726593, now seen corresponding path program 1 times [2025-03-17 20:25:17,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:17,859 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1661752370] [2025-03-17 20:25:17,859 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:17,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:17,873 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:25:17,875 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:25:17,875 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:17,875 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:17,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:17,927 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:17,927 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1661752370] [2025-03-17 20:25:17,927 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1661752370] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:17,927 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:17,927 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:17,927 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028397838] [2025-03-17 20:25:17,927 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:17,927 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:17,928 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:17,928 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:17,928 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:17,928 INFO L87 Difference]: Start difference. First operand 37324 states and 67729 transitions. cyclomatic complexity: 30409 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:18,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:18,312 INFO L93 Difference]: Finished difference Result 37125 states and 67373 transitions. [2025-03-17 20:25:18,312 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37125 states and 67373 transitions. [2025-03-17 20:25:18,641 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35645 [2025-03-17 20:25:18,730 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37125 states to 37125 states and 67373 transitions. [2025-03-17 20:25:18,731 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37125 [2025-03-17 20:25:18,758 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37125 [2025-03-17 20:25:18,758 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37125 states and 67373 transitions. [2025-03-17 20:25:18,784 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:18,785 INFO L218 hiAutomatonCegarLoop]: Abstraction has 37125 states and 67373 transitions. [2025-03-17 20:25:18,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37125 states and 67373 transitions. [2025-03-17 20:25:19,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37125 to 37110. [2025-03-17 20:25:19,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37110 states, 37110 states have (on average 1.8150094314201024) internal successors, (67355), 37109 states have internal predecessors, (67355), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:19,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37110 states to 37110 states and 67355 transitions. [2025-03-17 20:25:19,116 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37110 states and 67355 transitions. [2025-03-17 20:25:19,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:19,117 INFO L432 stractBuchiCegarLoop]: Abstraction has 37110 states and 67355 transitions. [2025-03-17 20:25:19,117 INFO L338 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2025-03-17 20:25:19,117 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37110 states and 67355 transitions. [2025-03-17 20:25:19,355 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35630 [2025-03-17 20:25:19,355 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:19,355 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:19,358 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:19,358 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:19,359 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:19,359 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~23#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:19,359 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:19,360 INFO L85 PathProgramCache]: Analyzing trace with hash 1730375782, now seen corresponding path program 1 times [2025-03-17 20:25:19,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:19,360 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [486893694] [2025-03-17 20:25:19,360 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:19,360 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:19,371 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 58 statements into 1 equivalence classes. [2025-03-17 20:25:19,374 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 58 of 58 statements. [2025-03-17 20:25:19,374 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:19,374 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:19,398 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:19,398 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:19,398 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [486893694] [2025-03-17 20:25:19,398 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [486893694] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:19,398 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:19,398 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:19,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321561607] [2025-03-17 20:25:19,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:19,399 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:19,399 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:19,399 INFO L85 PathProgramCache]: Analyzing trace with hash -1681537001, now seen corresponding path program 1 times [2025-03-17 20:25:19,399 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:19,399 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [723615167] [2025-03-17 20:25:19,399 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:19,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:19,414 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-17 20:25:19,416 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-17 20:25:19,417 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:19,417 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:19,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:19,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:19,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [723615167] [2025-03-17 20:25:19,448 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [723615167] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:19,448 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:19,449 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:19,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881556767] [2025-03-17 20:25:19,449 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:19,450 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:19,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:19,450 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:19,450 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:19,450 INFO L87 Difference]: Start difference. First operand 37110 states and 67355 transitions. cyclomatic complexity: 30249 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:19,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:19,798 INFO L93 Difference]: Finished difference Result 37144 states and 67384 transitions. [2025-03-17 20:25:19,799 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37144 states and 67384 transitions. [2025-03-17 20:25:19,942 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35659 [2025-03-17 20:25:20,193 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37144 states to 37144 states and 67384 transitions. [2025-03-17 20:25:20,193 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37144 [2025-03-17 20:25:20,215 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37144 [2025-03-17 20:25:20,215 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37144 states and 67384 transitions. [2025-03-17 20:25:20,235 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:20,235 INFO L218 hiAutomatonCegarLoop]: Abstraction has 37144 states and 67384 transitions. [2025-03-17 20:25:20,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37144 states and 67384 transitions. [2025-03-17 20:25:20,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37144 to 37118. [2025-03-17 20:25:20,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37118 states, 37118 states have (on average 1.8146990678377068) internal successors, (67358), 37117 states have internal predecessors, (67358), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:20,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37118 states to 37118 states and 67358 transitions. [2025-03-17 20:25:20,560 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37118 states and 67358 transitions. [2025-03-17 20:25:20,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:25:20,561 INFO L432 stractBuchiCegarLoop]: Abstraction has 37118 states and 67358 transitions. [2025-03-17 20:25:20,561 INFO L338 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2025-03-17 20:25:20,561 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37118 states and 67358 transitions. [2025-03-17 20:25:20,776 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35633 [2025-03-17 20:25:20,776 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:20,776 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:20,780 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:20,781 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:20,781 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:20,781 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~23#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:20,782 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:20,782 INFO L85 PathProgramCache]: Analyzing trace with hash 1730375782, now seen corresponding path program 2 times [2025-03-17 20:25:20,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:20,782 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [241090482] [2025-03-17 20:25:20,782 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:20,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:20,798 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 58 statements into 1 equivalence classes. [2025-03-17 20:25:20,801 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 58 of 58 statements. [2025-03-17 20:25:20,801 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:20,801 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:20,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:20,830 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:20,830 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [241090482] [2025-03-17 20:25:20,830 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [241090482] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:20,830 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:20,830 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:20,830 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [182329366] [2025-03-17 20:25:20,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:20,831 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:20,831 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:20,831 INFO L85 PathProgramCache]: Analyzing trace with hash -62219618, now seen corresponding path program 1 times [2025-03-17 20:25:20,831 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:20,831 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1126376851] [2025-03-17 20:25:20,831 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:20,831 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:20,843 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:25:20,846 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:25:20,846 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:20,846 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:20,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:20,909 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:20,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1126376851] [2025-03-17 20:25:20,909 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1126376851] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:20,909 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:20,909 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:20,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119392922] [2025-03-17 20:25:20,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:20,909 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:20,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:20,910 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:25:20,910 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:25:20,910 INFO L87 Difference]: Start difference. First operand 37118 states and 67358 transitions. cyclomatic complexity: 30244 Second operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:21,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:21,021 INFO L93 Difference]: Finished difference Result 37118 states and 67352 transitions. [2025-03-17 20:25:21,021 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37118 states and 67352 transitions. [2025-03-17 20:25:21,164 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35633 [2025-03-17 20:25:21,269 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37118 states to 37118 states and 67352 transitions. [2025-03-17 20:25:21,269 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37118 [2025-03-17 20:25:21,300 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37118 [2025-03-17 20:25:21,300 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37118 states and 67352 transitions. [2025-03-17 20:25:21,329 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:21,329 INFO L218 hiAutomatonCegarLoop]: Abstraction has 37118 states and 67352 transitions. [2025-03-17 20:25:21,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37118 states and 67352 transitions. [2025-03-17 20:25:21,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37118 to 37118. [2025-03-17 20:25:21,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37118 states, 37118 states have (on average 1.8145374211972627) internal successors, (67352), 37117 states have internal predecessors, (67352), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:21,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37118 states to 37118 states and 67352 transitions. [2025-03-17 20:25:21,837 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37118 states and 67352 transitions. [2025-03-17 20:25:21,837 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:25:21,838 INFO L432 stractBuchiCegarLoop]: Abstraction has 37118 states and 67352 transitions. [2025-03-17 20:25:21,838 INFO L338 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2025-03-17 20:25:21,838 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37118 states and 67352 transitions. [2025-03-17 20:25:21,952 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35633 [2025-03-17 20:25:21,952 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:21,952 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:21,956 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:21,957 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:21,957 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:21,957 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~23#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:21,958 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:21,958 INFO L85 PathProgramCache]: Analyzing trace with hash 335752607, now seen corresponding path program 1 times [2025-03-17 20:25:21,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:21,958 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392560426] [2025-03-17 20:25:21,958 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:21,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:21,972 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 63 statements into 1 equivalence classes. [2025-03-17 20:25:21,975 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 63 of 63 statements. [2025-03-17 20:25:21,975 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:21,975 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:22,052 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:22,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:22,052 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392560426] [2025-03-17 20:25:22,052 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392560426] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:22,052 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:22,052 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:22,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499937215] [2025-03-17 20:25:22,053 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:22,053 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:22,053 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:22,053 INFO L85 PathProgramCache]: Analyzing trace with hash -62219618, now seen corresponding path program 2 times [2025-03-17 20:25:22,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:22,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [510865487] [2025-03-17 20:25:22,053 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:22,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:22,067 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:25:22,070 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:25:22,070 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:22,070 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:22,280 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:22,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:22,281 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [510865487] [2025-03-17 20:25:22,281 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [510865487] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:22,281 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:22,281 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:22,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258057979] [2025-03-17 20:25:22,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:22,281 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:22,281 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:22,282 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-17 20:25:22,282 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-17 20:25:22,282 INFO L87 Difference]: Start difference. First operand 37118 states and 67352 transitions. cyclomatic complexity: 30238 Second operand has 7 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:22,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:22,515 INFO L93 Difference]: Finished difference Result 37423 states and 67823 transitions. [2025-03-17 20:25:22,516 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37423 states and 67823 transitions. [2025-03-17 20:25:22,670 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35889 [2025-03-17 20:25:22,781 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37423 states to 37387 states and 67772 transitions. [2025-03-17 20:25:22,781 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37387 [2025-03-17 20:25:22,814 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37387 [2025-03-17 20:25:22,814 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37387 states and 67772 transitions. [2025-03-17 20:25:22,840 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:22,840 INFO L218 hiAutomatonCegarLoop]: Abstraction has 37387 states and 67772 transitions. [2025-03-17 20:25:22,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37387 states and 67772 transitions. [2025-03-17 20:25:23,252 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37387 to 37370. [2025-03-17 20:25:23,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37370 states, 37370 states have (on average 1.8128980465614128) internal successors, (67748), 37369 states have internal predecessors, (67748), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:23,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37370 states to 37370 states and 67748 transitions. [2025-03-17 20:25:23,346 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37370 states and 67748 transitions. [2025-03-17 20:25:23,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:23,346 INFO L432 stractBuchiCegarLoop]: Abstraction has 37370 states and 67748 transitions. [2025-03-17 20:25:23,346 INFO L338 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2025-03-17 20:25:23,347 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37370 states and 67748 transitions. [2025-03-17 20:25:23,609 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35873 [2025-03-17 20:25:23,609 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:23,609 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:23,614 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:23,614 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:23,614 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:23,614 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:23,614 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:23,615 INFO L85 PathProgramCache]: Analyzing trace with hash 335752607, now seen corresponding path program 2 times [2025-03-17 20:25:23,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:23,615 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1568668613] [2025-03-17 20:25:23,615 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:23,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:23,626 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 63 statements into 1 equivalence classes. [2025-03-17 20:25:23,630 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 63 of 63 statements. [2025-03-17 20:25:23,630 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:23,630 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:23,683 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:23,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:23,684 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1568668613] [2025-03-17 20:25:23,684 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1568668613] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:23,684 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:23,684 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:23,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134298461] [2025-03-17 20:25:23,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:23,684 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:23,684 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:23,684 INFO L85 PathProgramCache]: Analyzing trace with hash 10166940, now seen corresponding path program 1 times [2025-03-17 20:25:23,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:23,685 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [689663621] [2025-03-17 20:25:23,685 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:23,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:23,694 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:25:23,697 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:25:23,697 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:23,698 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:23,758 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:23,758 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:23,758 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [689663621] [2025-03-17 20:25:23,758 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [689663621] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:23,758 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:23,758 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2025-03-17 20:25:23,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1886931813] [2025-03-17 20:25:23,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:23,759 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:23,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:23,759 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2025-03-17 20:25:23,759 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2025-03-17 20:25:23,759 INFO L87 Difference]: Start difference. First operand 37370 states and 67748 transitions. cyclomatic complexity: 30382 Second operand has 8 states, 8 states have (on average 7.375) internal successors, (59), 8 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:25,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:25,110 INFO L93 Difference]: Finished difference Result 42073 states and 76490 transitions. [2025-03-17 20:25:25,110 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42073 states and 76490 transitions. [2025-03-17 20:25:25,291 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 40572 [2025-03-17 20:25:25,417 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42073 states to 42073 states and 76490 transitions. [2025-03-17 20:25:25,417 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42073 [2025-03-17 20:25:25,451 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42073 [2025-03-17 20:25:25,451 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42073 states and 76490 transitions. [2025-03-17 20:25:25,486 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:25,486 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42073 states and 76490 transitions. [2025-03-17 20:25:25,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42073 states and 76490 transitions. [2025-03-17 20:25:26,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42073 to 37336. [2025-03-17 20:25:26,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37336 states, 37336 states have (on average 1.8118973644739662) internal successors, (67649), 37335 states have internal predecessors, (67649), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:26,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37336 states to 37336 states and 67649 transitions. [2025-03-17 20:25:26,112 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37336 states and 67649 transitions. [2025-03-17 20:25:26,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2025-03-17 20:25:26,113 INFO L432 stractBuchiCegarLoop]: Abstraction has 37336 states and 67649 transitions. [2025-03-17 20:25:26,113 INFO L338 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2025-03-17 20:25:26,113 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37336 states and 67649 transitions. [2025-03-17 20:25:26,204 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35845 [2025-03-17 20:25:26,205 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:26,205 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:26,209 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:26,209 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:26,209 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:26,209 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;" "stopRequestedAtCurrentFloor_#t~ret60#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1;" "assume !(0 != ~persons_0~0);" "assume !(0 != ~persons_1~0);" "assume !(0 != ~persons_2~0);" "assume !(0 != ~persons_3~0);" "assume !(0 != ~persons_4~0);" "assume !(0 != ~persons_5~0);" "assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~22#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret61#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret61#1;havoc processWaitingOnFloor_#t~ret61#1;" "assume !(0 != processWaitingOnFloor_~tmp___0~9#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret63#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret63#1;havoc processWaitingOnFloor_#t~ret63#1;" "assume !(0 != processWaitingOnFloor_~tmp___2~4#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret65#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret65#1;havoc processWaitingOnFloor_#t~ret65#1;" "assume !(0 != processWaitingOnFloor_~tmp___4~2#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1;" "assume !(0 != processWaitingOnFloor_~tmp___6~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1;" "assume !(0 != processWaitingOnFloor_~tmp___8~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1;" "assume !(0 != processWaitingOnFloor_~tmp___10~0#1);" "assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1;" "assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0;" "havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1;" "assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0;" "havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:26,210 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:26,210 INFO L85 PathProgramCache]: Analyzing trace with hash 1890865758, now seen corresponding path program 1 times [2025-03-17 20:25:26,210 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:26,210 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [723945914] [2025-03-17 20:25:26,210 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:26,210 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:26,222 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 64 statements into 1 equivalence classes. [2025-03-17 20:25:26,224 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 64 of 64 statements. [2025-03-17 20:25:26,224 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:26,224 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:26,278 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:26,278 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:26,279 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [723945914] [2025-03-17 20:25:26,279 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [723945914] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:26,279 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:26,279 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:26,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [9494795] [2025-03-17 20:25:26,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:26,279 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:26,280 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:26,280 INFO L85 PathProgramCache]: Analyzing trace with hash -1096760702, now seen corresponding path program 1 times [2025-03-17 20:25:26,280 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:26,280 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527653469] [2025-03-17 20:25:26,280 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:26,280 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:26,290 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 67 statements into 1 equivalence classes. [2025-03-17 20:25:26,292 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 67 of 67 statements. [2025-03-17 20:25:26,292 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:26,292 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:26,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:26,332 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:26,332 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527653469] [2025-03-17 20:25:26,332 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527653469] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:26,332 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:26,332 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:26,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1342140652] [2025-03-17 20:25:26,332 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:26,332 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:26,333 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:26,333 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-17 20:25:26,333 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-17 20:25:26,333 INFO L87 Difference]: Start difference. First operand 37336 states and 67649 transitions. cyclomatic complexity: 30317 Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:26,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:26,544 INFO L93 Difference]: Finished difference Result 37333 states and 67639 transitions. [2025-03-17 20:25:26,544 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37333 states and 67639 transitions. [2025-03-17 20:25:26,684 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35845 [2025-03-17 20:25:27,007 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37333 states to 37333 states and 67639 transitions. [2025-03-17 20:25:27,007 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37333 [2025-03-17 20:25:27,034 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37333 [2025-03-17 20:25:27,035 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37333 states and 67639 transitions. [2025-03-17 20:25:27,057 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:27,057 INFO L218 hiAutomatonCegarLoop]: Abstraction has 37333 states and 67639 transitions. [2025-03-17 20:25:27,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37333 states and 67639 transitions. [2025-03-17 20:25:27,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37333 to 37332. [2025-03-17 20:25:27,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37332 states, 37332 states have (on average 1.811796849887496) internal successors, (67638), 37331 states have internal predecessors, (67638), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:27,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37332 states to 37332 states and 67638 transitions. [2025-03-17 20:25:27,375 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37332 states and 67638 transitions. [2025-03-17 20:25:27,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:25:27,376 INFO L432 stractBuchiCegarLoop]: Abstraction has 37332 states and 67638 transitions. [2025-03-17 20:25:27,376 INFO L338 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2025-03-17 20:25:27,376 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37332 states and 67638 transitions. [2025-03-17 20:25:27,476 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35845 [2025-03-17 20:25:27,476 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:27,476 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:27,480 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:27,480 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:27,481 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:27,481 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;" "stopRequestedAtCurrentFloor_#t~ret60#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1;" "assume !(0 != ~persons_0~0);" "assume !(0 != ~persons_1~0);" "assume !(0 != ~persons_2~0);" "assume !(0 != ~persons_3~0);" "assume !(0 != ~persons_4~0);" "assume !(0 != ~persons_5~0);" "assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~22#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret61#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret61#1;havoc processWaitingOnFloor_#t~ret61#1;" "assume !(0 != processWaitingOnFloor_~tmp___0~9#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret63#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret63#1;havoc processWaitingOnFloor_#t~ret63#1;" "assume !(0 != processWaitingOnFloor_~tmp___2~4#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret65#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret65#1;havoc processWaitingOnFloor_#t~ret65#1;" "assume !(0 != processWaitingOnFloor_~tmp___4~2#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1;" "assume !(0 != processWaitingOnFloor_~tmp___6~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1;" "assume !(0 != processWaitingOnFloor_~tmp___8~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1;" "assume !(0 != processWaitingOnFloor_~tmp___10~0#1);" "assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1;" "assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0;" "havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1;" "assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0;" "havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:27,481 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:27,481 INFO L85 PathProgramCache]: Analyzing trace with hash 1422033829, now seen corresponding path program 1 times [2025-03-17 20:25:27,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:27,482 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [837043912] [2025-03-17 20:25:27,482 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:27,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:27,493 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 66 statements into 1 equivalence classes. [2025-03-17 20:25:27,495 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 66 of 66 statements. [2025-03-17 20:25:27,495 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:27,495 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:27,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:27,526 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:27,526 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [837043912] [2025-03-17 20:25:27,526 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [837043912] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:27,526 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:27,526 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:27,526 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1640446885] [2025-03-17 20:25:27,526 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:27,526 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:27,527 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:27,527 INFO L85 PathProgramCache]: Analyzing trace with hash -1094726978, now seen corresponding path program 1 times [2025-03-17 20:25:27,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:27,527 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1439367419] [2025-03-17 20:25:27,527 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:27,527 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:27,536 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 67 statements into 1 equivalence classes. [2025-03-17 20:25:27,537 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 67 of 67 statements. [2025-03-17 20:25:27,537 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:27,537 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:27,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:27,745 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:27,745 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1439367419] [2025-03-17 20:25:27,745 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1439367419] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:27,745 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:27,745 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:27,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1638605211] [2025-03-17 20:25:27,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:27,746 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:27,746 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:27,746 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:27,746 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:27,747 INFO L87 Difference]: Start difference. First operand 37332 states and 67638 transitions. cyclomatic complexity: 30310 Second operand has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:27,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:27,988 INFO L93 Difference]: Finished difference Result 37358 states and 67675 transitions. [2025-03-17 20:25:27,988 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37358 states and 67675 transitions. [2025-03-17 20:25:28,137 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35845 [2025-03-17 20:25:28,246 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37358 states to 37358 states and 67675 transitions. [2025-03-17 20:25:28,247 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37358 [2025-03-17 20:25:28,276 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37358 [2025-03-17 20:25:28,276 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37358 states and 67675 transitions. [2025-03-17 20:25:28,302 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:28,302 INFO L218 hiAutomatonCegarLoop]: Abstraction has 37358 states and 67675 transitions. [2025-03-17 20:25:28,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37358 states and 67675 transitions. [2025-03-17 20:25:28,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37358 to 37332. [2025-03-17 20:25:28,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37332 states, 37332 states have (on average 1.811555769848923) internal successors, (67629), 37331 states have internal predecessors, (67629), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:28,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37332 states to 37332 states and 67629 transitions. [2025-03-17 20:25:28,832 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37332 states and 67629 transitions. [2025-03-17 20:25:28,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:28,833 INFO L432 stractBuchiCegarLoop]: Abstraction has 37332 states and 67629 transitions. [2025-03-17 20:25:28,833 INFO L338 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2025-03-17 20:25:28,833 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37332 states and 67629 transitions. [2025-03-17 20:25:28,924 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 35845 [2025-03-17 20:25:28,924 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:28,924 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:28,928 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:28,929 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:28,929 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:28,929 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;" "stopRequestedAtCurrentFloor_#t~ret60#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1;" "assume !(0 != ~persons_0~0);" "assume !(0 != ~persons_1~0);" "assume !(0 != ~persons_2~0);" "assume !(0 != ~persons_3~0);" "assume !(0 != ~persons_4~0);" "assume !(0 != ~persons_5~0);" "assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~22#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret61#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret61#1;havoc processWaitingOnFloor_#t~ret61#1;" "assume !(0 != processWaitingOnFloor_~tmp___0~9#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret63#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret63#1;havoc processWaitingOnFloor_#t~ret63#1;" "assume !(0 != processWaitingOnFloor_~tmp___2~4#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret65#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret65#1;havoc processWaitingOnFloor_#t~ret65#1;" "assume !(0 != processWaitingOnFloor_~tmp___4~2#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1;" "assume !(0 != processWaitingOnFloor_~tmp___6~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1;" "assume !(0 != processWaitingOnFloor_~tmp___8~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1;" "assume !(0 != processWaitingOnFloor_~tmp___10~0#1);" "assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1;" "assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0;" "havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1;" "assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0;" "havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:28,930 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:28,930 INFO L85 PathProgramCache]: Analyzing trace with hash -752852770, now seen corresponding path program 1 times [2025-03-17 20:25:28,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:28,930 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913560827] [2025-03-17 20:25:28,930 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:28,930 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:28,944 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 68 statements into 1 equivalence classes. [2025-03-17 20:25:28,946 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 68 of 68 statements. [2025-03-17 20:25:28,947 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:28,947 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:28,981 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:28,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:28,982 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1913560827] [2025-03-17 20:25:28,982 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1913560827] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:28,982 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:28,982 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:28,982 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1165011868] [2025-03-17 20:25:28,982 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:28,983 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:28,983 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:28,984 INFO L85 PathProgramCache]: Analyzing trace with hash -1096760702, now seen corresponding path program 2 times [2025-03-17 20:25:28,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:28,984 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1027380029] [2025-03-17 20:25:28,984 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:28,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:28,994 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 67 statements into 1 equivalence classes. [2025-03-17 20:25:28,996 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 67 of 67 statements. [2025-03-17 20:25:28,996 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:28,996 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:29,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:29,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:29,022 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1027380029] [2025-03-17 20:25:29,022 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1027380029] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:29,022 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:29,022 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:29,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186407839] [2025-03-17 20:25:29,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:29,022 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:29,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:29,023 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:25:29,023 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:25:29,023 INFO L87 Difference]: Start difference. First operand 37332 states and 67629 transitions. cyclomatic complexity: 30301 Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:30,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:30,615 INFO L93 Difference]: Finished difference Result 57592 states and 104963 transitions. [2025-03-17 20:25:30,615 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57592 states and 104963 transitions. [2025-03-17 20:25:30,892 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 56072 [2025-03-17 20:25:31,076 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57592 states to 57560 states and 104913 transitions. [2025-03-17 20:25:31,076 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57560 [2025-03-17 20:25:31,124 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57560 [2025-03-17 20:25:31,125 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57560 states and 104913 transitions. [2025-03-17 20:25:31,172 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:31,172 INFO L218 hiAutomatonCegarLoop]: Abstraction has 57560 states and 104913 transitions. [2025-03-17 20:25:31,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57560 states and 104913 transitions. [2025-03-17 20:25:31,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57560 to 56441. [2025-03-17 20:25:31,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56441 states, 56441 states have (on average 1.829149022873443) internal successors, (103239), 56440 states have internal predecessors, (103239), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:32,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56441 states to 56441 states and 103239 transitions. [2025-03-17 20:25:32,044 INFO L240 hiAutomatonCegarLoop]: Abstraction has 56441 states and 103239 transitions. [2025-03-17 20:25:32,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:32,044 INFO L432 stractBuchiCegarLoop]: Abstraction has 56441 states and 103239 transitions. [2025-03-17 20:25:32,044 INFO L338 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2025-03-17 20:25:32,044 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56441 states and 103239 transitions. [2025-03-17 20:25:32,215 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 54953 [2025-03-17 20:25:32,215 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:32,215 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:32,222 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:32,222 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:32,222 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:32,223 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1;" "assume !(0 != ~persons_0~0);" "assume !(0 != ~persons_1~0);" "assume !(0 != ~persons_2~0);" "assume !(0 != ~persons_3~0);" "assume !(0 != ~persons_4~0);" "assume !(0 != ~persons_5~0);" "assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~22#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret61#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret61#1;havoc processWaitingOnFloor_#t~ret61#1;" "assume !(0 != processWaitingOnFloor_~tmp___0~9#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret63#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret63#1;havoc processWaitingOnFloor_#t~ret63#1;" "assume !(0 != processWaitingOnFloor_~tmp___2~4#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret65#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret65#1;havoc processWaitingOnFloor_#t~ret65#1;" "assume !(0 != processWaitingOnFloor_~tmp___4~2#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1;" "assume !(0 != processWaitingOnFloor_~tmp___6~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1;" "assume !(0 != processWaitingOnFloor_~tmp___8~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1;" "assume !(0 != processWaitingOnFloor_~tmp___10~0#1);" "assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1;" "assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0;" "havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1;" "assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0;" "havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:32,223 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:32,223 INFO L85 PathProgramCache]: Analyzing trace with hash -752852770, now seen corresponding path program 2 times [2025-03-17 20:25:32,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:32,223 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1187458657] [2025-03-17 20:25:32,223 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:32,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:32,235 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 68 statements into 1 equivalence classes. [2025-03-17 20:25:32,237 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 68 of 68 statements. [2025-03-17 20:25:32,237 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:32,237 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:32,268 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:32,268 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:32,268 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1187458657] [2025-03-17 20:25:32,268 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1187458657] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:32,268 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:32,268 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:32,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1203736117] [2025-03-17 20:25:32,268 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:32,269 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:32,269 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:32,269 INFO L85 PathProgramCache]: Analyzing trace with hash 33424196, now seen corresponding path program 1 times [2025-03-17 20:25:32,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:32,269 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678988894] [2025-03-17 20:25:32,269 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:32,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:32,278 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 69 statements into 1 equivalence classes. [2025-03-17 20:25:32,280 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 69 of 69 statements. [2025-03-17 20:25:32,280 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:32,280 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:32,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:32,313 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:32,313 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678988894] [2025-03-17 20:25:32,313 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678988894] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:32,313 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:32,313 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:32,313 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [316006078] [2025-03-17 20:25:32,313 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:32,314 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:32,314 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:32,315 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:32,315 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:32,315 INFO L87 Difference]: Start difference. First operand 56441 states and 103239 transitions. cyclomatic complexity: 46804 Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:32,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:32,603 INFO L93 Difference]: Finished difference Result 56467 states and 103276 transitions. [2025-03-17 20:25:32,603 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56467 states and 103276 transitions. [2025-03-17 20:25:33,097 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 54953 [2025-03-17 20:25:33,258 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56467 states to 56467 states and 103276 transitions. [2025-03-17 20:25:33,258 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56467 [2025-03-17 20:25:33,307 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56467 [2025-03-17 20:25:33,307 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56467 states and 103276 transitions. [2025-03-17 20:25:33,350 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:33,350 INFO L218 hiAutomatonCegarLoop]: Abstraction has 56467 states and 103276 transitions. [2025-03-17 20:25:33,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56467 states and 103276 transitions. [2025-03-17 20:25:33,767 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56467 to 56441. [2025-03-17 20:25:34,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56441 states, 56441 states have (on average 1.8289895643238072) internal successors, (103230), 56440 states have internal predecessors, (103230), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:34,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56441 states to 56441 states and 103230 transitions. [2025-03-17 20:25:34,137 INFO L240 hiAutomatonCegarLoop]: Abstraction has 56441 states and 103230 transitions. [2025-03-17 20:25:34,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:34,138 INFO L432 stractBuchiCegarLoop]: Abstraction has 56441 states and 103230 transitions. [2025-03-17 20:25:34,138 INFO L338 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2025-03-17 20:25:34,138 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56441 states and 103230 transitions. [2025-03-17 20:25:34,277 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 54953 [2025-03-17 20:25:34,278 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:34,278 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:34,284 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:34,284 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:34,284 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:34,284 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1;" "assume !(0 != ~persons_0~0);" "assume !(0 != ~persons_1~0);" "assume !(0 != ~persons_2~0);" "assume !(0 != ~persons_3~0);" "assume !(0 != ~persons_4~0);" "assume !(0 != ~persons_5~0);" "assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~22#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret61#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret61#1;havoc processWaitingOnFloor_#t~ret61#1;" "assume !(0 != processWaitingOnFloor_~tmp___0~9#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret63#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret63#1;havoc processWaitingOnFloor_#t~ret63#1;" "assume !(0 != processWaitingOnFloor_~tmp___2~4#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret65#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret65#1;havoc processWaitingOnFloor_#t~ret65#1;" "assume !(0 != processWaitingOnFloor_~tmp___4~2#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1;" "assume !(0 != processWaitingOnFloor_~tmp___6~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1;" "assume !(0 != processWaitingOnFloor_~tmp___8~1#1);" "assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1;" "assume 0 == isPersonOnFloor_~floor#1;" "assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1;" "processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1;" "assume !(0 != processWaitingOnFloor_~tmp___10~0#1);" "assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1;" "assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0;" "havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true;havoc processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~22#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1;" "assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0;" "havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:34,285 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:34,285 INFO L85 PathProgramCache]: Analyzing trace with hash -1351148673, now seen corresponding path program 1 times [2025-03-17 20:25:34,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:34,285 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606166381] [2025-03-17 20:25:34,285 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:34,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:34,299 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 70 statements into 1 equivalence classes. [2025-03-17 20:25:34,301 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 70 of 70 statements. [2025-03-17 20:25:34,301 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:34,302 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:34,333 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:34,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:34,334 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606166381] [2025-03-17 20:25:34,335 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606166381] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:34,335 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:34,335 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:34,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118456777] [2025-03-17 20:25:34,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:34,335 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:34,336 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:34,336 INFO L85 PathProgramCache]: Analyzing trace with hash 31390472, now seen corresponding path program 1 times [2025-03-17 20:25:34,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:34,336 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1237421059] [2025-03-17 20:25:34,336 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:34,336 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:34,345 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 69 statements into 1 equivalence classes. [2025-03-17 20:25:34,347 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 69 of 69 statements. [2025-03-17 20:25:34,347 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:34,347 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:34,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:34,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:34,381 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1237421059] [2025-03-17 20:25:34,381 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1237421059] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:34,381 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:34,381 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:34,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [292234815] [2025-03-17 20:25:34,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:34,381 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:34,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:34,382 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-17 20:25:34,382 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-17 20:25:34,382 INFO L87 Difference]: Start difference. First operand 56441 states and 103230 transitions. cyclomatic complexity: 46795 Second operand has 6 states, 6 states have (on average 11.5) internal successors, (69), 6 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:35,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:35,346 INFO L93 Difference]: Finished difference Result 61164 states and 111977 transitions. [2025-03-17 20:25:35,347 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 61164 states and 111977 transitions. [2025-03-17 20:25:35,830 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 59673 [2025-03-17 20:25:36,023 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 61164 states to 61164 states and 111977 transitions. [2025-03-17 20:25:36,024 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61164 [2025-03-17 20:25:36,079 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61164 [2025-03-17 20:25:36,080 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61164 states and 111977 transitions. [2025-03-17 20:25:36,126 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:36,126 INFO L218 hiAutomatonCegarLoop]: Abstraction has 61164 states and 111977 transitions. [2025-03-17 20:25:36,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61164 states and 111977 transitions. [2025-03-17 20:25:36,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61164 to 58368. [2025-03-17 20:25:36,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58368 states, 58368 states have (on average 1.8290330317982457) internal successors, (106757), 58367 states have internal predecessors, (106757), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:37,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58368 states to 58368 states and 106757 transitions. [2025-03-17 20:25:37,239 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58368 states and 106757 transitions. [2025-03-17 20:25:37,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2025-03-17 20:25:37,243 INFO L432 stractBuchiCegarLoop]: Abstraction has 58368 states and 106757 transitions. [2025-03-17 20:25:37,243 INFO L338 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2025-03-17 20:25:37,243 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58368 states and 106757 transitions. [2025-03-17 20:25:37,424 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:37,425 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:37,425 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:37,445 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:37,445 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:37,446 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:37,446 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume !(0 != continueInDirection_~tmp~19#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:37,447 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:37,447 INFO L85 PathProgramCache]: Analyzing trace with hash -1351148673, now seen corresponding path program 2 times [2025-03-17 20:25:37,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:37,447 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [920663028] [2025-03-17 20:25:37,447 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:37,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:37,459 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 70 statements into 1 equivalence classes. [2025-03-17 20:25:37,462 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 70 of 70 statements. [2025-03-17 20:25:37,462 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:37,462 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:37,496 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:37,496 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:37,496 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [920663028] [2025-03-17 20:25:37,496 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [920663028] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:37,496 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:37,496 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:37,496 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561886871] [2025-03-17 20:25:37,496 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:37,497 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:37,497 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:37,497 INFO L85 PathProgramCache]: Analyzing trace with hash -1269580316, now seen corresponding path program 1 times [2025-03-17 20:25:37,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:37,497 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1408297829] [2025-03-17 20:25:37,497 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:37,497 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:37,513 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 117 statements into 1 equivalence classes. [2025-03-17 20:25:37,516 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-03-17 20:25:37,516 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:37,516 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:37,554 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2025-03-17 20:25:37,554 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:37,554 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1408297829] [2025-03-17 20:25:37,554 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1408297829] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:37,554 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:37,554 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:37,555 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1746150062] [2025-03-17 20:25:37,555 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:37,555 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:37,555 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:37,555 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:37,555 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:37,555 INFO L87 Difference]: Start difference. First operand 58368 states and 106757 transitions. cyclomatic complexity: 48396 Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:37,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:37,817 INFO L93 Difference]: Finished difference Result 58381 states and 106776 transitions. [2025-03-17 20:25:37,817 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58381 states and 106776 transitions. [2025-03-17 20:25:38,044 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:38,532 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58381 states to 58381 states and 106776 transitions. [2025-03-17 20:25:38,533 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58381 [2025-03-17 20:25:38,564 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58381 [2025-03-17 20:25:38,564 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58381 states and 106776 transitions. [2025-03-17 20:25:38,589 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:38,589 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58381 states and 106776 transitions. [2025-03-17 20:25:38,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58381 states and 106776 transitions. [2025-03-17 20:25:38,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58381 to 58368. [2025-03-17 20:25:39,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58368 states, 58368 states have (on average 1.8289645010964912) internal successors, (106753), 58367 states have internal predecessors, (106753), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:39,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58368 states to 58368 states and 106753 transitions. [2025-03-17 20:25:39,142 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58368 states and 106753 transitions. [2025-03-17 20:25:39,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:39,143 INFO L432 stractBuchiCegarLoop]: Abstraction has 58368 states and 106753 transitions. [2025-03-17 20:25:39,143 INFO L338 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2025-03-17 20:25:39,143 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58368 states and 106753 transitions. [2025-03-17 20:25:39,305 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:39,305 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:39,305 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:39,322 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:39,322 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:39,322 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume !(4 == initPersonOnFloor_~floor#1);" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:39,323 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume !(0 != continueInDirection_~tmp~19#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:39,323 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:39,323 INFO L85 PathProgramCache]: Analyzing trace with hash 482433904, now seen corresponding path program 1 times [2025-03-17 20:25:39,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:39,323 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1511861878] [2025-03-17 20:25:39,323 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:39,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:39,334 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 70 statements into 1 equivalence classes. [2025-03-17 20:25:39,336 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 70 of 70 statements. [2025-03-17 20:25:39,336 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:39,336 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:39,601 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:39,602 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:39,602 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1511861878] [2025-03-17 20:25:39,602 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1511861878] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:39,602 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:39,603 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:39,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [512319319] [2025-03-17 20:25:39,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:39,603 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:39,603 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:39,604 INFO L85 PathProgramCache]: Analyzing trace with hash -1267546592, now seen corresponding path program 1 times [2025-03-17 20:25:39,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:39,604 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [491444508] [2025-03-17 20:25:39,604 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:39,604 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:39,621 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 117 statements into 1 equivalence classes. [2025-03-17 20:25:39,624 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-03-17 20:25:39,624 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:39,624 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:39,638 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2025-03-17 20:25:39,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:39,638 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [491444508] [2025-03-17 20:25:39,638 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [491444508] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:39,639 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:39,640 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:39,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310764579] [2025-03-17 20:25:39,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:39,641 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:39,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:39,642 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:39,642 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:39,642 INFO L87 Difference]: Start difference. First operand 58368 states and 106753 transitions. cyclomatic complexity: 48392 Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:39,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:39,819 INFO L93 Difference]: Finished difference Result 58351 states and 106723 transitions. [2025-03-17 20:25:39,819 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58351 states and 106723 transitions. [2025-03-17 20:25:40,055 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:40,231 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58351 states to 58351 states and 106723 transitions. [2025-03-17 20:25:40,232 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58351 [2025-03-17 20:25:40,281 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58351 [2025-03-17 20:25:40,281 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58351 states and 106723 transitions. [2025-03-17 20:25:40,318 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:40,318 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58351 states and 106723 transitions. [2025-03-17 20:25:40,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58351 states and 106723 transitions. [2025-03-17 20:25:41,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58351 to 58350. [2025-03-17 20:25:41,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58350 states, 58350 states have (on average 1.8289974293059126) internal successors, (106722), 58349 states have internal predecessors, (106722), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:41,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58350 states to 58350 states and 106722 transitions. [2025-03-17 20:25:41,272 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58350 states and 106722 transitions. [2025-03-17 20:25:41,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:41,273 INFO L432 stractBuchiCegarLoop]: Abstraction has 58350 states and 106722 transitions. [2025-03-17 20:25:41,273 INFO L338 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2025-03-17 20:25:41,273 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58350 states and 106722 transitions. [2025-03-17 20:25:41,473 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:41,473 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:41,473 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:41,490 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:41,491 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:41,491 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:41,491 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume !(0 != continueInDirection_~tmp~19#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:41,492 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:41,492 INFO L85 PathProgramCache]: Analyzing trace with hash 1263917549, now seen corresponding path program 1 times [2025-03-17 20:25:41,492 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:41,492 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1289708302] [2025-03-17 20:25:41,492 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:41,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:41,511 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 71 statements into 1 equivalence classes. [2025-03-17 20:25:41,514 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 71 of 71 statements. [2025-03-17 20:25:41,514 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:41,514 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:41,567 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:41,567 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:41,567 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1289708302] [2025-03-17 20:25:41,567 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1289708302] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:41,567 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:41,567 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:41,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [514887276] [2025-03-17 20:25:41,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:41,568 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:41,568 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:41,568 INFO L85 PathProgramCache]: Analyzing trace with hash -1269580316, now seen corresponding path program 2 times [2025-03-17 20:25:41,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:41,568 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030678593] [2025-03-17 20:25:41,568 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:41,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:41,589 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 117 statements into 2 equivalence classes. [2025-03-17 20:25:41,592 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 48 of 117 statements. [2025-03-17 20:25:41,592 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:41,592 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:41,638 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2025-03-17 20:25:41,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:41,638 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030678593] [2025-03-17 20:25:41,638 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2030678593] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:41,638 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:41,638 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:25:41,638 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105712380] [2025-03-17 20:25:41,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:41,639 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:41,639 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:41,639 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:41,639 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:41,639 INFO L87 Difference]: Start difference. First operand 58350 states and 106722 transitions. cyclomatic complexity: 48379 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:41,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:41,911 INFO L93 Difference]: Finished difference Result 58363 states and 106739 transitions. [2025-03-17 20:25:41,912 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58363 states and 106739 transitions. [2025-03-17 20:25:42,470 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:42,609 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58363 states to 58363 states and 106739 transitions. [2025-03-17 20:25:42,609 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58363 [2025-03-17 20:25:42,649 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58363 [2025-03-17 20:25:42,650 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58363 states and 106739 transitions. [2025-03-17 20:25:42,686 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:42,687 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58363 states and 106739 transitions. [2025-03-17 20:25:42,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58363 states and 106739 transitions. [2025-03-17 20:25:43,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58363 to 58350. [2025-03-17 20:25:43,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58350 states, 58350 states have (on average 1.8288946015424163) internal successors, (106716), 58349 states have internal predecessors, (106716), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:43,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58350 states to 58350 states and 106716 transitions. [2025-03-17 20:25:43,241 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58350 states and 106716 transitions. [2025-03-17 20:25:43,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:43,242 INFO L432 stractBuchiCegarLoop]: Abstraction has 58350 states and 106716 transitions. [2025-03-17 20:25:43,242 INFO L338 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2025-03-17 20:25:43,242 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58350 states and 106716 transitions. [2025-03-17 20:25:43,616 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:43,617 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:43,617 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:43,632 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:43,632 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:43,632 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume !(3 == initPersonOnFloor_~person#1);" "assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:43,633 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume !(0 != continueInDirection_~tmp~19#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:43,633 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:43,633 INFO L85 PathProgramCache]: Analyzing trace with hash -513988068, now seen corresponding path program 1 times [2025-03-17 20:25:43,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:43,633 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169161976] [2025-03-17 20:25:43,633 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:43,633 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:43,646 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 72 statements into 1 equivalence classes. [2025-03-17 20:25:43,649 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 72 of 72 statements. [2025-03-17 20:25:43,649 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:43,649 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:43,684 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:43,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:43,684 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169161976] [2025-03-17 20:25:43,684 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169161976] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:43,684 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:43,684 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:25:43,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [505039332] [2025-03-17 20:25:43,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:43,685 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:43,685 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:43,685 INFO L85 PathProgramCache]: Analyzing trace with hash -1267546592, now seen corresponding path program 2 times [2025-03-17 20:25:43,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:43,685 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1304119668] [2025-03-17 20:25:43,685 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:25:43,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:43,707 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 117 statements into 2 equivalence classes. [2025-03-17 20:25:43,716 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 48 of 117 statements. [2025-03-17 20:25:43,716 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:25:43,716 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:43,782 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2025-03-17 20:25:43,782 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:43,782 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1304119668] [2025-03-17 20:25:43,782 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1304119668] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:43,782 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:43,782 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:43,782 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1889629609] [2025-03-17 20:25:43,782 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:43,783 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:43,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:43,783 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:25:43,783 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:25:43,783 INFO L87 Difference]: Start difference. First operand 58350 states and 106716 transitions. cyclomatic complexity: 48373 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:43,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:43,988 INFO L93 Difference]: Finished difference Result 58363 states and 106733 transitions. [2025-03-17 20:25:43,988 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58363 states and 106733 transitions. [2025-03-17 20:25:44,220 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:44,393 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58363 states to 58363 states and 106733 transitions. [2025-03-17 20:25:44,393 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58363 [2025-03-17 20:25:44,442 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58363 [2025-03-17 20:25:44,442 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58363 states and 106733 transitions. [2025-03-17 20:25:44,482 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:44,482 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58363 states and 106733 transitions. [2025-03-17 20:25:44,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58363 states and 106733 transitions. [2025-03-17 20:25:45,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58363 to 58350. [2025-03-17 20:25:45,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58350 states, 58350 states have (on average 1.8287917737789203) internal successors, (106710), 58349 states have internal predecessors, (106710), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:45,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58350 states to 58350 states and 106710 transitions. [2025-03-17 20:25:45,336 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58350 states and 106710 transitions. [2025-03-17 20:25:45,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:25:45,337 INFO L432 stractBuchiCegarLoop]: Abstraction has 58350 states and 106710 transitions. [2025-03-17 20:25:45,337 INFO L338 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2025-03-17 20:25:45,337 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58350 states and 106710 transitions. [2025-03-17 20:25:45,496 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:45,496 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:45,496 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:45,514 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:45,515 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:45,515 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume !(3 == initPersonOnFloor_~person#1);" "assume !(4 == initPersonOnFloor_~person#1);" "assume !(5 == initPersonOnFloor_~person#1);" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:45,515 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume !(0 != continueInDirection_~tmp~19#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:45,516 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:45,516 INFO L85 PathProgramCache]: Analyzing trace with hash -1014729847, now seen corresponding path program 1 times [2025-03-17 20:25:45,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:45,516 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [769209027] [2025-03-17 20:25:45,516 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:45,516 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:45,529 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 73 statements into 1 equivalence classes. [2025-03-17 20:25:45,532 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 73 of 73 statements. [2025-03-17 20:25:45,532 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:45,532 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:45,555 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:45,555 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:45,555 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [769209027] [2025-03-17 20:25:45,555 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [769209027] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:45,555 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:45,556 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:45,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1573632886] [2025-03-17 20:25:45,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:45,557 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:45,558 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:45,558 INFO L85 PathProgramCache]: Analyzing trace with hash -1267546592, now seen corresponding path program 3 times [2025-03-17 20:25:45,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:45,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161973687] [2025-03-17 20:25:45,558 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:25:45,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:45,575 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 117 statements into 2 equivalence classes. [2025-03-17 20:25:45,586 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 48 of 117 statements. [2025-03-17 20:25:45,586 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:25:45,586 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:45,635 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2025-03-17 20:25:45,635 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:45,635 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161973687] [2025-03-17 20:25:45,635 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161973687] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:45,635 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:45,635 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:25:45,635 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2013422908] [2025-03-17 20:25:45,635 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:45,635 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:45,635 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:45,636 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:25:45,636 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:25:45,636 INFO L87 Difference]: Start difference. First operand 58350 states and 106710 transitions. cyclomatic complexity: 48367 Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:46,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:46,119 INFO L93 Difference]: Finished difference Result 58350 states and 106709 transitions. [2025-03-17 20:25:46,119 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58350 states and 106709 transitions. [2025-03-17 20:25:46,383 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:46,575 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58350 states to 58350 states and 106709 transitions. [2025-03-17 20:25:46,575 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58350 [2025-03-17 20:25:46,627 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58350 [2025-03-17 20:25:46,627 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58350 states and 106709 transitions. [2025-03-17 20:25:46,670 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:46,670 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58350 states and 106709 transitions. [2025-03-17 20:25:46,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58350 states and 106709 transitions. [2025-03-17 20:25:47,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58350 to 58350. [2025-03-17 20:25:47,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58350 states, 58350 states have (on average 1.8287746358183377) internal successors, (106709), 58349 states have internal predecessors, (106709), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:47,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58350 states to 58350 states and 106709 transitions. [2025-03-17 20:25:47,445 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58350 states and 106709 transitions. [2025-03-17 20:25:47,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:25:47,445 INFO L432 stractBuchiCegarLoop]: Abstraction has 58350 states and 106709 transitions. [2025-03-17 20:25:47,445 INFO L338 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2025-03-17 20:25:47,446 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58350 states and 106709 transitions. [2025-03-17 20:25:47,788 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:47,789 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:47,789 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:47,806 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:47,806 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:47,806 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume !(3 == initPersonOnFloor_~person#1);" "assume !(4 == initPersonOnFloor_~person#1);" "assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:47,807 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume !(0 != continueInDirection_~tmp~19#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1);" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:47,807 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:47,807 INFO L85 PathProgramCache]: Analyzing trace with hash -1035067222, now seen corresponding path program 1 times [2025-03-17 20:25:47,807 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:47,807 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2017738080] [2025-03-17 20:25:47,807 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:47,807 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:47,820 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 73 statements into 1 equivalence classes. [2025-03-17 20:25:47,823 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 73 of 73 statements. [2025-03-17 20:25:47,823 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:47,823 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:47,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:47,903 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:47,903 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2017738080] [2025-03-17 20:25:47,903 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2017738080] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:47,903 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:47,903 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:47,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209192829] [2025-03-17 20:25:47,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:47,904 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:47,904 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:47,904 INFO L85 PathProgramCache]: Analyzing trace with hash -1267546592, now seen corresponding path program 4 times [2025-03-17 20:25:47,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:47,904 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [248702906] [2025-03-17 20:25:47,904 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-17 20:25:47,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:47,920 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 117 statements into 2 equivalence classes. [2025-03-17 20:25:47,924 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-03-17 20:25:47,924 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-17 20:25:47,924 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:47,937 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2025-03-17 20:25:47,938 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:47,938 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [248702906] [2025-03-17 20:25:47,938 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [248702906] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:47,938 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:47,938 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:47,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1250934658] [2025-03-17 20:25:47,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:47,939 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:47,939 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:47,939 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-17 20:25:47,939 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-17 20:25:47,939 INFO L87 Difference]: Start difference. First operand 58350 states and 106709 transitions. cyclomatic complexity: 48366 Second operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 7 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:48,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:48,202 INFO L93 Difference]: Finished difference Result 58352 states and 106710 transitions. [2025-03-17 20:25:48,202 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58352 states and 106710 transitions. [2025-03-17 20:25:48,433 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:48,596 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58352 states to 58352 states and 106710 transitions. [2025-03-17 20:25:48,596 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58352 [2025-03-17 20:25:48,645 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58352 [2025-03-17 20:25:48,646 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58352 states and 106710 transitions. [2025-03-17 20:25:48,687 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:48,687 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58352 states and 106710 transitions. [2025-03-17 20:25:48,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58352 states and 106710 transitions. [2025-03-17 20:25:49,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58352 to 58352. [2025-03-17 20:25:49,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58352 states, 58352 states have (on average 1.8287290924047161) internal successors, (106710), 58351 states have internal predecessors, (106710), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:49,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58352 states to 58352 states and 106710 transitions. [2025-03-17 20:25:49,526 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58352 states and 106710 transitions. [2025-03-17 20:25:49,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:49,527 INFO L432 stractBuchiCegarLoop]: Abstraction has 58352 states and 106710 transitions. [2025-03-17 20:25:49,527 INFO L338 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2025-03-17 20:25:49,527 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58352 states and 106710 transitions. [2025-03-17 20:25:49,687 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:49,687 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:25:49,687 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:25:49,703 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:49,703 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:25:49,703 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1;" "main_#t~ret23#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1;" "assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "bigMacCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume !(3 == initPersonOnFloor_~person#1);" "assume !(4 == initPersonOnFloor_~person#1);" "assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume !(0 == __utac_acc__Specification1_spec__2_~floor#1);" "assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1;" "angelinaCall_#t~ret13#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1;" "assume !(0 == __utac_acc__Specification1_spec__2_~floor#1);" "assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1;" "havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-17 20:25:49,704 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~13#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 0);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 1);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 2);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 3);" "assume !(~currentFloorID~0 > 4);" "assume !(~currentFloorID~0 > 4);stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret81#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret82#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1;" "timeShift_#t~ret83#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume !(0 != continueInDirection_~tmp~19#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" "assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret17#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1;" "assume 1 != cleanup_~tmp___0~1#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret39#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret18#1 := isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1;" "assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1;" "timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1;" "stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;" "stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1;" "timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret55#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret55#1;havoc continueInDirection_#t~ret55#1;" "assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1;" "assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1);" "assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1;" "assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1;" "__utac_acc__Specification1_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret6#1;havoc __utac_acc__Specification1_spec__3_#t~ret6#1;" "assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0;" "havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-17 20:25:49,704 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:49,705 INFO L85 PathProgramCache]: Analyzing trace with hash -1915833815, now seen corresponding path program 1 times [2025-03-17 20:25:49,705 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:49,705 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629076228] [2025-03-17 20:25:49,705 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:49,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:49,718 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 75 statements into 1 equivalence classes. [2025-03-17 20:25:49,720 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 75 of 75 statements. [2025-03-17 20:25:49,720 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:49,720 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:49,780 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:25:49,780 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:49,781 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629076228] [2025-03-17 20:25:49,781 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629076228] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:49,781 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:49,781 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:25:49,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [157748943] [2025-03-17 20:25:49,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:49,781 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:25:49,781 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:25:49,781 INFO L85 PathProgramCache]: Analyzing trace with hash 2063826713, now seen corresponding path program 1 times [2025-03-17 20:25:49,781 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:25:49,782 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [887482074] [2025-03-17 20:25:49,782 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:25:49,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:25:49,797 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 117 statements into 1 equivalence classes. [2025-03-17 20:25:49,799 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-03-17 20:25:49,799 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:25:49,799 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:25:49,812 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2025-03-17 20:25:49,813 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:25:49,813 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [887482074] [2025-03-17 20:25:49,813 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [887482074] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:25:49,813 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:25:49,813 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:25:49,813 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1578224424] [2025-03-17 20:25:49,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:25:49,813 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:25:49,813 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:25:49,814 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-17 20:25:49,814 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-17 20:25:49,814 INFO L87 Difference]: Start difference. First operand 58352 states and 106710 transitions. cyclomatic complexity: 48365 Second operand has 7 states, 7 states have (on average 10.714285714285714) internal successors, (75), 7 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:50,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:25:50,377 INFO L93 Difference]: Finished difference Result 58358 states and 106719 transitions. [2025-03-17 20:25:50,377 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58358 states and 106719 transitions. [2025-03-17 20:25:50,595 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 56880 [2025-03-17 20:25:50,754 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58358 states to 58358 states and 106719 transitions. [2025-03-17 20:25:50,754 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58358 [2025-03-17 20:25:50,796 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58358 [2025-03-17 20:25:50,796 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58358 states and 106719 transitions. [2025-03-17 20:25:50,832 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:25:50,832 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58358 states and 106719 transitions. [2025-03-17 20:25:50,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58358 states and 106719 transitions. [2025-03-17 20:25:51,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58358 to 58358. [2025-03-17 20:25:51,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58358 states, 58358 states have (on average 1.828695294561157) internal successors, (106719), 58357 states have internal predecessors, (106719), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:25:51,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58358 states to 58358 states and 106719 transitions. [2025-03-17 20:25:51,790 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58358 states and 106719 transitions. [2025-03-17 20:25:51,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:25:51,791 INFO L432 stractBuchiCegarLoop]: Abstraction has 58358 states and 106719 transitions. [2025-03-17 20:25:51,791 INFO L338 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2025-03-17 20:25:51,791 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58358 states and 106719 transitions.