./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 8fc3dc66 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a9d4bfafe2ee2b10c7451875462462bdbc63aaee25e1868c3faa4756fb5ebfc5 --- Real Ultimate output --- This is Ultimate 0.3.0-?-8fc3dc6-m [2025-03-17 20:25:50,535 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-17 20:25:50,592 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2025-03-17 20:25:50,597 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-17 20:25:50,597 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-17 20:25:50,597 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2025-03-17 20:25:50,614 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-17 20:25:50,615 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-17 20:25:50,615 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-17 20:25:50,615 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-17 20:25:50,615 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-17 20:25:50,616 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-17 20:25:50,616 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-17 20:25:50,616 INFO L153 SettingsManager]: * Use SBE=true [2025-03-17 20:25:50,616 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2025-03-17 20:25:50,616 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2025-03-17 20:25:50,616 INFO L153 SettingsManager]: * Use old map elimination=false [2025-03-17 20:25:50,616 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2025-03-17 20:25:50,616 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2025-03-17 20:25:50,616 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2025-03-17 20:25:50,617 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * sizeof long=4 [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * sizeof POINTER=4 [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2025-03-17 20:25:50,617 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-03-17 20:25:50,618 INFO L153 SettingsManager]: * sizeof long double=12 [2025-03-17 20:25:50,618 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-17 20:25:50,618 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2025-03-17 20:25:50,618 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-17 20:25:50,618 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-17 20:25:50,618 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-17 20:25:50,618 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-17 20:25:50,618 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-17 20:25:50,618 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-17 20:25:50,619 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2025-03-17 20:25:50,619 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a9d4bfafe2ee2b10c7451875462462bdbc63aaee25e1868c3faa4756fb5ebfc5 [2025-03-17 20:25:50,936 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-17 20:25:50,943 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-17 20:25:50,945 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-17 20:25:50,946 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-17 20:25:50,947 INFO L274 PluginConnector]: CDTParser initialized [2025-03-17 20:25:50,948 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c [2025-03-17 20:25:52,330 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0160c9982/5143ce2db3314784b7dfccefdbbaf7c7/FLAG62ec92e04 [2025-03-17 20:25:52,627 INFO L384 CDTParser]: Found 1 translation units. [2025-03-17 20:25:52,628 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c [2025-03-17 20:25:52,648 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0160c9982/5143ce2db3314784b7dfccefdbbaf7c7/FLAG62ec92e04 [2025-03-17 20:25:52,660 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0160c9982/5143ce2db3314784b7dfccefdbbaf7c7 [2025-03-17 20:25:52,662 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-17 20:25:52,663 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-17 20:25:52,666 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-17 20:25:52,666 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-17 20:25:52,670 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-17 20:25:52,670 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:25:52" (1/1) ... [2025-03-17 20:25:52,671 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3febd2c1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:52, skipping insertion in model container [2025-03-17 20:25:52,671 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:25:52" (1/1) ... [2025-03-17 20:25:52,713 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-17 20:25:53,099 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:25:53,114 INFO L200 MainTranslator]: Completed pre-run [2025-03-17 20:25:53,119 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [48] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [716] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [725] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [739] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2285] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2651] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [3008] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [3126] [2025-03-17 20:25:53,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [3217] [2025-03-17 20:25:53,122 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [3398] [2025-03-17 20:25:53,190 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:25:53,212 INFO L204 MainTranslator]: Completed translation [2025-03-17 20:25:53,213 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53 WrapperNode [2025-03-17 20:25:53,214 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-17 20:25:53,215 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-17 20:25:53,215 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-17 20:25:53,215 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-17 20:25:53,219 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,240 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,427 INFO L138 Inliner]: procedures = 93, calls = 342, calls flagged for inlining = 195, calls inlined = 415, statements flattened = 13596 [2025-03-17 20:25:53,428 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-17 20:25:53,428 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-17 20:25:53,429 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-17 20:25:53,429 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-17 20:25:53,435 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,436 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,458 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,516 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2025-03-17 20:25:53,516 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,516 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,579 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,592 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,607 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,623 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,647 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-17 20:25:53,649 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-17 20:25:53,649 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-17 20:25:53,649 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-17 20:25:53,650 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (1/1) ... [2025-03-17 20:25:53,654 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:25:53,665 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:25:53,679 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:25:53,681 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2025-03-17 20:25:53,703 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-17 20:25:53,703 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-03-17 20:25:53,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-03-17 20:25:53,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-03-17 20:25:53,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-03-17 20:25:53,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-03-17 20:25:53,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-03-17 20:25:53,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-03-17 20:25:53,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-03-17 20:25:53,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-03-17 20:25:53,706 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-03-17 20:25:53,706 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-17 20:25:53,706 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-17 20:25:53,874 INFO L256 CfgBuilder]: Building ICFG [2025-03-17 20:25:53,875 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-17 20:25:59,645 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1044-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; [2025-03-17 20:25:59,646 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1044-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; [2025-03-17 20:25:59,646 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1044-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1044-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1577-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1577-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1577-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1577-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1611-1: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1611-3: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1611-5: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1611-7: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-1: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-3: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-5: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,647 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-7: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-9: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-11: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-13: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-15: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-17: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-19: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-21: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1093-23: isEmpty_#res#1 := isEmpty_~retValue_acc~8#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1667-1: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1667-3: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1; [2025-03-17 20:25:59,648 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1695-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1695-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1173-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1709-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1709-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1709-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1709-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1186-1: isIdle_#res#1 := isIdle_~retValue_acc~10#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,649 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,650 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,651 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,652 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,653 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,654 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-221: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-223: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-225: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-227: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-229: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-231: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-233: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,655 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-235: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-237: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-239: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-241: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-243: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-245: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-247: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-249: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-251: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L166-253: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L713-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3430-1: valid_product_#res#1 := valid_product_~retValue_acc~27#1; [2025-03-17 20:25:59,656 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L823-1: isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3005-1: main_#res#1 := main_~retValue_acc~22#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-1: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-3: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-5: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-7: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,657 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-9: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-11: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L402-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-13: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-15: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-17: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-19: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-21: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-23: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,658 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-25: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-27: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-29: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-31: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-33: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-35: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-37: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-39: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-41: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-43: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-45: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3045-47: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3084-1: getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; [2025-03-17 20:25:59,659 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1001-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1001-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1001-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1001-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-1: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-3: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-5: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-7: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-9: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-11: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-13: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-15: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-17: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-19: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-1: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-21: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,660 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-3: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,661 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-23: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,672 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-5: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,673 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-7: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,673 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-25: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,673 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-9: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,673 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-27: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,673 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-11: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,673 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-29: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,673 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-31: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-13: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-33: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-15: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-1: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-35: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-17: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-3: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-37: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-19: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-5: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-39: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-21: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-7: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-41: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1538-23: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-9: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-43: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-11: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-45: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-13: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3123-47: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-15: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-17: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:25:59,675 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1010-19: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; [2025-03-17 20:26:00,393 INFO L? ?]: Removed 5907 outVars from TransFormulas that were not future-live. [2025-03-17 20:26:00,393 INFO L307 CfgBuilder]: Performing block encoding [2025-03-17 20:26:00,464 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-17 20:26:00,466 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2025-03-17 20:26:00,466 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:26:00 BoogieIcfgContainer [2025-03-17 20:26:00,466 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-17 20:26:00,469 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2025-03-17 20:26:00,469 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2025-03-17 20:26:00,474 INFO L274 PluginConnector]: BuchiAutomizer initialized [2025-03-17 20:26:00,474 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:26:00,475 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.03 08:25:52" (1/3) ... [2025-03-17 20:26:00,475 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@44661099 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:26:00, skipping insertion in model container [2025-03-17 20:26:00,477 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:26:00,477 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:25:53" (2/3) ... [2025-03-17 20:26:00,477 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@44661099 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:26:00, skipping insertion in model container [2025-03-17 20:26:00,477 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:26:00,477 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:26:00" (3/3) ... [2025-03-17 20:26:00,478 INFO L363 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product29.cil.c [2025-03-17 20:26:00,561 INFO L306 stractBuchiCegarLoop]: Interprodecural is true [2025-03-17 20:26:00,561 INFO L307 stractBuchiCegarLoop]: Hoare is None [2025-03-17 20:26:00,562 INFO L308 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2025-03-17 20:26:00,562 INFO L309 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2025-03-17 20:26:00,562 INFO L310 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2025-03-17 20:26:00,562 INFO L311 stractBuchiCegarLoop]: Difference is false [2025-03-17 20:26:00,562 INFO L312 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2025-03-17 20:26:00,562 INFO L316 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2025-03-17 20:26:00,580 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3572 states, 3571 states have (on average 1.8874264911789416) internal successors, (6740), 3571 states have internal predecessors, (6740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:00,677 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1778 [2025-03-17 20:26:00,678 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:00,678 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:00,695 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:00,695 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:00,696 INFO L338 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2025-03-17 20:26:00,704 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3572 states, 3571 states have (on average 1.8874264911789416) internal successors, (6740), 3571 states have internal predecessors, (6740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:00,744 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1778 [2025-03-17 20:26:00,744 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:00,744 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:00,747 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:00,747 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:00,752 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:00,754 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:00,757 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:00,758 INFO L85 PathProgramCache]: Analyzing trace with hash -2031661341, now seen corresponding path program 1 times [2025-03-17 20:26:00,764 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:00,764 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539058165] [2025-03-17 20:26:00,764 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:00,765 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:00,868 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 37 statements into 1 equivalence classes. [2025-03-17 20:26:00,950 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 37 of 37 statements. [2025-03-17 20:26:00,951 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:00,951 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:01,261 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:01,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:01,262 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539058165] [2025-03-17 20:26:01,263 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539058165] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:01,263 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:01,263 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:01,264 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1475600353] [2025-03-17 20:26:01,265 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:01,269 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:01,270 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:01,270 INFO L85 PathProgramCache]: Analyzing trace with hash -617224044, now seen corresponding path program 1 times [2025-03-17 20:26:01,270 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:01,270 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000304518] [2025-03-17 20:26:01,270 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:01,270 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:01,356 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 37 statements into 1 equivalence classes. [2025-03-17 20:26:01,438 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 37 of 37 statements. [2025-03-17 20:26:01,438 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:01,438 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:01,623 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:01,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:01,623 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000304518] [2025-03-17 20:26:01,623 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000304518] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:01,624 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:01,624 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:01,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [936383570] [2025-03-17 20:26:01,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:01,624 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:01,625 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:01,646 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:01,646 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:01,654 INFO L87 Difference]: Start difference. First operand has 3572 states, 3571 states have (on average 1.8874264911789416) internal successors, (6740), 3571 states have internal predecessors, (6740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:02,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:02,410 INFO L93 Difference]: Finished difference Result 3590 states and 6752 transitions. [2025-03-17 20:26:02,410 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 3590 states and 6752 transitions. [2025-03-17 20:26:02,534 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1787 [2025-03-17 20:26:02,561 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 3590 states to 3579 states and 6738 transitions. [2025-03-17 20:26:02,562 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 3579 [2025-03-17 20:26:02,566 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 3579 [2025-03-17 20:26:02,567 INFO L73 IsDeterministic]: Start isDeterministic. Operand 3579 states and 6738 transitions. [2025-03-17 20:26:02,579 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:02,580 INFO L218 hiAutomatonCegarLoop]: Abstraction has 3579 states and 6738 transitions. [2025-03-17 20:26:02,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3579 states and 6738 transitions. [2025-03-17 20:26:02,672 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3579 to 3571. [2025-03-17 20:26:02,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3571 states, 3571 states have (on average 1.8846261551386165) internal successors, (6730), 3570 states have internal predecessors, (6730), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:02,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3571 states to 3571 states and 6730 transitions. [2025-03-17 20:26:02,691 INFO L240 hiAutomatonCegarLoop]: Abstraction has 3571 states and 6730 transitions. [2025-03-17 20:26:02,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:02,696 INFO L432 stractBuchiCegarLoop]: Abstraction has 3571 states and 6730 transitions. [2025-03-17 20:26:02,696 INFO L338 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2025-03-17 20:26:02,696 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3571 states and 6730 transitions. [2025-03-17 20:26:02,709 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1783 [2025-03-17 20:26:02,710 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:02,710 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:02,712 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:02,712 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:02,713 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:02,715 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:02,718 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:02,718 INFO L85 PathProgramCache]: Analyzing trace with hash -1980295587, now seen corresponding path program 1 times [2025-03-17 20:26:02,720 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:02,720 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809838147] [2025-03-17 20:26:02,720 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:02,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:02,732 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 41 statements into 1 equivalence classes. [2025-03-17 20:26:02,741 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 41 of 41 statements. [2025-03-17 20:26:02,742 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:02,742 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:02,863 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:02,863 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:02,863 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809838147] [2025-03-17 20:26:02,863 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809838147] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:02,863 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:02,863 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:02,863 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [143704061] [2025-03-17 20:26:02,863 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:02,863 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:02,864 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:02,864 INFO L85 PathProgramCache]: Analyzing trace with hash -1352078898, now seen corresponding path program 1 times [2025-03-17 20:26:02,864 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:02,864 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1209558020] [2025-03-17 20:26:02,864 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:02,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:02,881 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 41 statements into 1 equivalence classes. [2025-03-17 20:26:02,889 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 41 of 41 statements. [2025-03-17 20:26:02,889 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:02,889 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:02,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:02,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:02,960 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1209558020] [2025-03-17 20:26:02,960 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1209558020] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:02,960 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:02,960 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:02,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926319003] [2025-03-17 20:26:02,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:02,960 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:02,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:02,961 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:02,961 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:02,961 INFO L87 Difference]: Start difference. First operand 3571 states and 6730 transitions. cyclomatic complexity: 3160 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:03,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:03,866 INFO L93 Difference]: Finished difference Result 4518 states and 8340 transitions. [2025-03-17 20:26:03,866 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4518 states and 8340 transitions. [2025-03-17 20:26:03,888 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3135 [2025-03-17 20:26:03,908 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4518 states to 4518 states and 8340 transitions. [2025-03-17 20:26:03,908 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4518 [2025-03-17 20:26:03,912 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4518 [2025-03-17 20:26:03,913 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4518 states and 8340 transitions. [2025-03-17 20:26:03,919 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:03,920 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4518 states and 8340 transitions. [2025-03-17 20:26:03,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4518 states and 8340 transitions. [2025-03-17 20:26:03,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4518 to 4509. [2025-03-17 20:26:03,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4509 states, 4509 states have (on average 1.8463073852295409) internal successors, (8325), 4508 states have internal predecessors, (8325), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:03,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4509 states to 4509 states and 8325 transitions. [2025-03-17 20:26:03,995 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4509 states and 8325 transitions. [2025-03-17 20:26:03,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:26:03,996 INFO L432 stractBuchiCegarLoop]: Abstraction has 4509 states and 8325 transitions. [2025-03-17 20:26:03,996 INFO L338 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2025-03-17 20:26:03,996 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4509 states and 8325 transitions. [2025-03-17 20:26:04,035 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3126 [2025-03-17 20:26:04,035 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:04,035 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:04,039 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:04,039 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:04,040 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:04,041 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret30#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1;" "stopRequestedAtCurrentFloor_#t~ret33#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret30#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:04,042 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:04,042 INFO L85 PathProgramCache]: Analyzing trace with hash -1900356758, now seen corresponding path program 1 times [2025-03-17 20:26:04,042 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:04,042 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [941964374] [2025-03-17 20:26:04,042 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:04,042 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:04,057 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:04,066 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:04,068 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:04,068 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:04,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:04,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:04,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [941964374] [2025-03-17 20:26:04,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [941964374] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:04,145 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:04,145 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:04,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1672367306] [2025-03-17 20:26:04,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:04,146 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:04,146 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:04,146 INFO L85 PathProgramCache]: Analyzing trace with hash -1780152320, now seen corresponding path program 1 times [2025-03-17 20:26:04,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:04,146 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1507720291] [2025-03-17 20:26:04,146 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:04,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:04,158 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 42 statements into 1 equivalence classes. [2025-03-17 20:26:04,163 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 42 of 42 statements. [2025-03-17 20:26:04,167 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:04,168 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:04,226 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:04,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:04,228 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1507720291] [2025-03-17 20:26:04,228 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1507720291] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:04,228 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:04,228 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:04,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705073167] [2025-03-17 20:26:04,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:04,229 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:04,229 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:04,229 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:04,229 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:04,229 INFO L87 Difference]: Start difference. First operand 4509 states and 8325 transitions. cyclomatic complexity: 3817 Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:06,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:06,037 INFO L93 Difference]: Finished difference Result 7192 states and 13209 transitions. [2025-03-17 20:26:06,037 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7192 states and 13209 transitions. [2025-03-17 20:26:06,059 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5813 [2025-03-17 20:26:06,092 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7192 states to 7192 states and 13209 transitions. [2025-03-17 20:26:06,092 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7192 [2025-03-17 20:26:06,099 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7192 [2025-03-17 20:26:06,099 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7192 states and 13209 transitions. [2025-03-17 20:26:06,109 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:06,109 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7192 states and 13209 transitions. [2025-03-17 20:26:06,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7192 states and 13209 transitions. [2025-03-17 20:26:06,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7192 to 6449. [2025-03-17 20:26:06,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6449 states, 6449 states have (on average 1.8545510931927431) internal successors, (11960), 6448 states have internal predecessors, (11960), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:06,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6449 states to 6449 states and 11960 transitions. [2025-03-17 20:26:06,204 INFO L240 hiAutomatonCegarLoop]: Abstraction has 6449 states and 11960 transitions. [2025-03-17 20:26:06,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:06,206 INFO L432 stractBuchiCegarLoop]: Abstraction has 6449 states and 11960 transitions. [2025-03-17 20:26:06,206 INFO L338 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2025-03-17 20:26:06,206 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6449 states and 11960 transitions. [2025-03-17 20:26:06,218 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5070 [2025-03-17 20:26:06,218 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:06,218 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:06,221 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:06,221 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:06,221 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:06,223 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:06,223 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:06,223 INFO L85 PathProgramCache]: Analyzing trace with hash -1900356758, now seen corresponding path program 2 times [2025-03-17 20:26:06,224 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:06,224 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025720959] [2025-03-17 20:26:06,224 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:06,224 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:06,243 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:06,248 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:06,249 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:06,249 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:06,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:06,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:06,305 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025720959] [2025-03-17 20:26:06,305 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1025720959] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:06,305 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:06,305 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:06,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1177491425] [2025-03-17 20:26:06,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:06,305 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:06,306 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:06,306 INFO L85 PathProgramCache]: Analyzing trace with hash 1072732689, now seen corresponding path program 1 times [2025-03-17 20:26:06,306 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:06,306 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2011094397] [2025-03-17 20:26:06,306 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:06,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:06,315 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 42 statements into 1 equivalence classes. [2025-03-17 20:26:06,318 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 42 of 42 statements. [2025-03-17 20:26:06,318 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:06,318 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:06,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:06,382 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:06,382 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2011094397] [2025-03-17 20:26:06,382 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2011094397] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:06,382 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:06,382 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:06,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925829404] [2025-03-17 20:26:06,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:06,383 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:06,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:06,383 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:06,383 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:06,383 INFO L87 Difference]: Start difference. First operand 6449 states and 11960 transitions. cyclomatic complexity: 5512 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:07,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:07,193 INFO L93 Difference]: Finished difference Result 10867 states and 20072 transitions. [2025-03-17 20:26:07,193 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10867 states and 20072 transitions. [2025-03-17 20:26:07,222 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9462 [2025-03-17 20:26:07,261 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10867 states to 10841 states and 20046 transitions. [2025-03-17 20:26:07,261 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10841 [2025-03-17 20:26:07,271 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10841 [2025-03-17 20:26:07,271 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10841 states and 20046 transitions. [2025-03-17 20:26:07,287 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:07,288 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10841 states and 20046 transitions. [2025-03-17 20:26:07,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10841 states and 20046 transitions. [2025-03-17 20:26:07,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10841 to 10832. [2025-03-17 20:26:07,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10832 states, 10832 states have (on average 1.8492429837518465) internal successors, (20031), 10831 states have internal predecessors, (20031), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:07,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10832 states to 10832 states and 20031 transitions. [2025-03-17 20:26:07,478 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10832 states and 20031 transitions. [2025-03-17 20:26:07,479 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:07,479 INFO L432 stractBuchiCegarLoop]: Abstraction has 10832 states and 20031 transitions. [2025-03-17 20:26:07,479 INFO L338 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2025-03-17 20:26:07,479 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10832 states and 20031 transitions. [2025-03-17 20:26:07,506 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9453 [2025-03-17 20:26:07,506 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:07,507 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:07,510 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:07,510 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:07,511 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:07,511 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:07,511 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:07,511 INFO L85 PathProgramCache]: Analyzing trace with hash -1900356758, now seen corresponding path program 3 times [2025-03-17 20:26:07,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:07,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1972640163] [2025-03-17 20:26:07,512 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:26:07,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:07,529 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:07,536 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:07,536 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:26:07,536 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:07,588 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:07,588 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:07,588 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1972640163] [2025-03-17 20:26:07,588 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1972640163] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:07,588 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:07,589 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:07,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [346243402] [2025-03-17 20:26:07,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:07,589 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:07,589 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:07,589 INFO L85 PathProgramCache]: Analyzing trace with hash 284735571, now seen corresponding path program 1 times [2025-03-17 20:26:07,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:07,589 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1768275206] [2025-03-17 20:26:07,589 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:07,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:07,600 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:26:07,603 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:26:07,603 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:07,603 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:07,734 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:07,734 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:07,734 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1768275206] [2025-03-17 20:26:07,734 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1768275206] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:07,734 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:07,735 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:07,735 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [286923791] [2025-03-17 20:26:07,735 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:07,735 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:07,735 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:07,736 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:07,736 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:07,736 INFO L87 Difference]: Start difference. First operand 10832 states and 20031 transitions. cyclomatic complexity: 9200 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:08,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:08,628 INFO L93 Difference]: Finished difference Result 19381 states and 35788 transitions. [2025-03-17 20:26:08,628 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19381 states and 35788 transitions. [2025-03-17 20:26:08,714 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17940 [2025-03-17 20:26:08,776 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19381 states to 19319 states and 35720 transitions. [2025-03-17 20:26:08,776 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19319 [2025-03-17 20:26:08,802 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19319 [2025-03-17 20:26:08,802 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19319 states and 35720 transitions. [2025-03-17 20:26:08,822 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:08,822 INFO L218 hiAutomatonCegarLoop]: Abstraction has 19319 states and 35720 transitions. [2025-03-17 20:26:08,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19319 states and 35720 transitions. [2025-03-17 20:26:09,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19319 to 13250. [2025-03-17 20:26:09,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13250 states, 13250 states have (on average 1.8441509433962264) internal successors, (24435), 13249 states have internal predecessors, (24435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:09,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13250 states to 13250 states and 24435 transitions. [2025-03-17 20:26:09,071 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13250 states and 24435 transitions. [2025-03-17 20:26:09,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:09,072 INFO L432 stractBuchiCegarLoop]: Abstraction has 13250 states and 24435 transitions. [2025-03-17 20:26:09,072 INFO L338 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2025-03-17 20:26:09,072 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13250 states and 24435 transitions. [2025-03-17 20:26:09,105 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11871 [2025-03-17 20:26:09,105 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:09,105 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:09,109 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:09,110 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:09,110 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:09,110 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret19#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret19#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:09,111 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:09,111 INFO L85 PathProgramCache]: Analyzing trace with hash -1900356758, now seen corresponding path program 4 times [2025-03-17 20:26:09,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:09,111 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042051643] [2025-03-17 20:26:09,111 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-17 20:26:09,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:09,125 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 45 statements into 2 equivalence classes. [2025-03-17 20:26:09,126 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 44 of 45 statements. [2025-03-17 20:26:09,126 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-17 20:26:09,126 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:09,143 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:09,143 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:09,143 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042051643] [2025-03-17 20:26:09,143 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042051643] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:09,143 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:09,143 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:09,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617911537] [2025-03-17 20:26:09,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:09,144 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:09,144 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:09,144 INFO L85 PathProgramCache]: Analyzing trace with hash -957859529, now seen corresponding path program 1 times [2025-03-17 20:26:09,144 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:09,144 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291009309] [2025-03-17 20:26:09,144 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:09,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:09,153 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:26:09,156 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:26:09,156 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:09,156 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:09,261 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:09,261 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:09,261 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291009309] [2025-03-17 20:26:09,261 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [291009309] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:09,261 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:09,261 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:09,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1971768107] [2025-03-17 20:26:09,261 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:09,262 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:09,262 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:09,262 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:09,262 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:09,263 INFO L87 Difference]: Start difference. First operand 13250 states and 24435 transitions. cyclomatic complexity: 11186 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:09,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:09,520 INFO L93 Difference]: Finished difference Result 24311 states and 44950 transitions. [2025-03-17 20:26:09,520 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24311 states and 44950 transitions. [2025-03-17 20:26:09,675 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22705 [2025-03-17 20:26:09,803 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24311 states to 24298 states and 44929 transitions. [2025-03-17 20:26:09,804 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24298 [2025-03-17 20:26:09,831 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24298 [2025-03-17 20:26:09,831 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24298 states and 44929 transitions. [2025-03-17 20:26:09,854 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:09,855 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24298 states and 44929 transitions. [2025-03-17 20:26:10,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24298 states and 44929 transitions. [2025-03-17 20:26:10,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24298 to 24290. [2025-03-17 20:26:10,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24290 states, 24290 states have (on average 1.8491972004940305) internal successors, (44917), 24289 states have internal predecessors, (44917), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:10,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24290 states to 24290 states and 44917 transitions. [2025-03-17 20:26:10,368 INFO L240 hiAutomatonCegarLoop]: Abstraction has 24290 states and 44917 transitions. [2025-03-17 20:26:10,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:26:10,369 INFO L432 stractBuchiCegarLoop]: Abstraction has 24290 states and 44917 transitions. [2025-03-17 20:26:10,369 INFO L338 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2025-03-17 20:26:10,369 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24290 states and 44917 transitions. [2025-03-17 20:26:10,431 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22699 [2025-03-17 20:26:10,432 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:10,432 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:10,439 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:10,439 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:10,439 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:10,440 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret30#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1;" "stopRequestedAtCurrentFloor_#t~ret33#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret30#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:10,440 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:10,440 INFO L85 PathProgramCache]: Analyzing trace with hash -92902295, now seen corresponding path program 1 times [2025-03-17 20:26:10,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:10,441 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [683817509] [2025-03-17 20:26:10,441 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:10,441 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:10,454 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:10,458 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:10,459 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:10,459 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:10,565 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:10,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:10,566 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [683817509] [2025-03-17 20:26:10,566 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [683817509] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:10,566 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:10,566 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:10,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115305295] [2025-03-17 20:26:10,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:10,566 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:10,567 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:10,567 INFO L85 PathProgramCache]: Analyzing trace with hash -202960492, now seen corresponding path program 1 times [2025-03-17 20:26:10,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:10,567 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1070270451] [2025-03-17 20:26:10,567 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:10,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:10,578 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:26:10,580 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:26:10,581 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:10,581 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:10,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:10,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:10,640 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1070270451] [2025-03-17 20:26:10,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1070270451] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:10,641 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:10,641 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:26:10,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1549645734] [2025-03-17 20:26:10,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:10,641 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:10,641 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:10,641 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-17 20:26:10,641 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-17 20:26:10,641 INFO L87 Difference]: Start difference. First operand 24290 states and 44917 transitions. cyclomatic complexity: 20631 Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:10,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:10,835 INFO L93 Difference]: Finished difference Result 24353 states and 44980 transitions. [2025-03-17 20:26:10,836 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24353 states and 44980 transitions. [2025-03-17 20:26:11,020 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22759 [2025-03-17 20:26:11,081 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24353 states to 24353 states and 44980 transitions. [2025-03-17 20:26:11,081 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24353 [2025-03-17 20:26:11,100 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24353 [2025-03-17 20:26:11,100 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24353 states and 44980 transitions. [2025-03-17 20:26:11,121 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:11,121 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24353 states and 44980 transitions. [2025-03-17 20:26:11,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24353 states and 44980 transitions. [2025-03-17 20:26:11,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24353 to 24344. [2025-03-17 20:26:11,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24344 states, 24344 states have (on average 1.8473135064081498) internal successors, (44971), 24343 states have internal predecessors, (44971), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:11,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24344 states to 24344 states and 44971 transitions. [2025-03-17 20:26:11,374 INFO L240 hiAutomatonCegarLoop]: Abstraction has 24344 states and 44971 transitions. [2025-03-17 20:26:11,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:26:11,375 INFO L432 stractBuchiCegarLoop]: Abstraction has 24344 states and 44971 transitions. [2025-03-17 20:26:11,375 INFO L338 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2025-03-17 20:26:11,375 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24344 states and 44971 transitions. [2025-03-17 20:26:11,553 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22750 [2025-03-17 20:26:11,554 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:11,554 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:11,559 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:11,559 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:11,559 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:11,560 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume 3 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_3~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:11,560 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:11,560 INFO L85 PathProgramCache]: Analyzing trace with hash -92902295, now seen corresponding path program 2 times [2025-03-17 20:26:11,560 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:11,561 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [367323027] [2025-03-17 20:26:11,561 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:11,561 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:11,573 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:11,577 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:11,577 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:11,577 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:11,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:11,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:11,613 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [367323027] [2025-03-17 20:26:11,613 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [367323027] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:11,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:11,613 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:11,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968166594] [2025-03-17 20:26:11,613 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:11,613 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:11,614 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:11,614 INFO L85 PathProgramCache]: Analyzing trace with hash -1316083594, now seen corresponding path program 1 times [2025-03-17 20:26:11,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:11,614 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330037631] [2025-03-17 20:26:11,614 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:11,614 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:11,626 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 44 statements into 1 equivalence classes. [2025-03-17 20:26:11,629 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 44 of 44 statements. [2025-03-17 20:26:11,630 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:11,630 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:11,694 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:11,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:11,694 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330037631] [2025-03-17 20:26:11,695 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330037631] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:11,695 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:11,695 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:11,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979997427] [2025-03-17 20:26:11,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:11,696 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:11,696 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:11,696 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:11,696 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:11,696 INFO L87 Difference]: Start difference. First operand 24344 states and 44971 transitions. cyclomatic complexity: 20631 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:12,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:12,497 INFO L93 Difference]: Finished difference Result 45605 states and 84220 transitions. [2025-03-17 20:26:12,497 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45605 states and 84220 transitions. [2025-03-17 20:26:12,892 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 43846 [2025-03-17 20:26:13,042 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45605 states to 45440 states and 84026 transitions. [2025-03-17 20:26:13,042 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45440 [2025-03-17 20:26:13,103 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45440 [2025-03-17 20:26:13,106 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45440 states and 84026 transitions. [2025-03-17 20:26:13,157 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:13,157 INFO L218 hiAutomatonCegarLoop]: Abstraction has 45440 states and 84026 transitions. [2025-03-17 20:26:13,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45440 states and 84026 transitions. [2025-03-17 20:26:13,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45440 to 29128. [2025-03-17 20:26:13,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29128 states, 29128 states have (on average 1.8443765449052458) internal successors, (53723), 29127 states have internal predecessors, (53723), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:14,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29128 states to 29128 states and 53723 transitions. [2025-03-17 20:26:14,230 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29128 states and 53723 transitions. [2025-03-17 20:26:14,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:14,230 INFO L432 stractBuchiCegarLoop]: Abstraction has 29128 states and 53723 transitions. [2025-03-17 20:26:14,230 INFO L338 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2025-03-17 20:26:14,231 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29128 states and 53723 transitions. [2025-03-17 20:26:14,308 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 27534 [2025-03-17 20:26:14,308 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:14,308 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:14,313 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:14,314 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:14,314 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:14,315 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume 4 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_4~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:14,315 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:14,315 INFO L85 PathProgramCache]: Analyzing trace with hash -92902295, now seen corresponding path program 3 times [2025-03-17 20:26:14,315 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:14,315 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [476154800] [2025-03-17 20:26:14,315 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:26:14,315 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:14,329 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:14,332 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:14,333 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:26:14,333 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:14,365 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:14,365 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:14,365 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [476154800] [2025-03-17 20:26:14,365 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [476154800] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:14,365 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:14,365 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:14,365 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990051315] [2025-03-17 20:26:14,365 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:14,366 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:14,366 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:14,366 INFO L85 PathProgramCache]: Analyzing trace with hash 1950384856, now seen corresponding path program 1 times [2025-03-17 20:26:14,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:14,367 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448246978] [2025-03-17 20:26:14,367 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:14,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:14,377 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:14,382 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:14,382 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:14,382 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:14,435 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:14,435 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:14,436 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448246978] [2025-03-17 20:26:14,436 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448246978] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:14,436 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:14,436 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:14,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [204054633] [2025-03-17 20:26:14,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:14,436 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:14,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:14,437 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:14,437 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:14,437 INFO L87 Difference]: Start difference. First operand 29128 states and 53723 transitions. cyclomatic complexity: 24599 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:15,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:15,324 INFO L93 Difference]: Finished difference Result 55124 states and 101625 transitions. [2025-03-17 20:26:15,325 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55124 states and 101625 transitions. [2025-03-17 20:26:15,616 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 53275 [2025-03-17 20:26:15,760 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55124 states to 54869 states and 101332 transitions. [2025-03-17 20:26:15,760 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 54869 [2025-03-17 20:26:15,804 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 54869 [2025-03-17 20:26:15,804 INFO L73 IsDeterministic]: Start isDeterministic. Operand 54869 states and 101332 transitions. [2025-03-17 20:26:15,843 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:15,843 INFO L218 hiAutomatonCegarLoop]: Abstraction has 54869 states and 101332 transitions. [2025-03-17 20:26:15,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54869 states and 101332 transitions. [2025-03-17 20:26:16,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54869 to 34099. [2025-03-17 20:26:16,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34099 states, 34099 states have (on average 1.8415789319334879) internal successors, (62796), 34098 states have internal predecessors, (62796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:16,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34099 states to 34099 states and 62796 transitions. [2025-03-17 20:26:16,517 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34099 states and 62796 transitions. [2025-03-17 20:26:16,518 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:16,518 INFO L432 stractBuchiCegarLoop]: Abstraction has 34099 states and 62796 transitions. [2025-03-17 20:26:16,519 INFO L338 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2025-03-17 20:26:16,519 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34099 states and 62796 transitions. [2025-03-17 20:26:16,634 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 32505 [2025-03-17 20:26:16,634 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:16,634 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:16,641 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:16,641 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:16,642 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:16,642 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:16,643 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:16,643 INFO L85 PathProgramCache]: Analyzing trace with hash -92902295, now seen corresponding path program 4 times [2025-03-17 20:26:16,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:16,643 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [993737987] [2025-03-17 20:26:16,643 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-17 20:26:16,643 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:16,658 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 45 statements into 2 equivalence classes. [2025-03-17 20:26:16,659 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 44 of 45 statements. [2025-03-17 20:26:16,659 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-17 20:26:16,659 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:16,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:16,679 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:16,679 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [993737987] [2025-03-17 20:26:16,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [993737987] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:16,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:16,679 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:16,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1642473212] [2025-03-17 20:26:16,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:16,680 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:16,680 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:16,680 INFO L85 PathProgramCache]: Analyzing trace with hash 1575385530, now seen corresponding path program 1 times [2025-03-17 20:26:16,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:16,681 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533813838] [2025-03-17 20:26:16,681 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:16,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:16,692 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:16,697 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:16,697 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:16,697 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:16,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:16,740 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:16,740 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [533813838] [2025-03-17 20:26:16,740 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [533813838] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:16,740 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:16,740 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:16,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [615922621] [2025-03-17 20:26:16,740 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:16,740 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:16,741 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:16,741 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:16,741 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:16,741 INFO L87 Difference]: Start difference. First operand 34099 states and 62796 transitions. cyclomatic complexity: 28701 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:18,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:18,239 INFO L93 Difference]: Finished difference Result 34099 states and 62423 transitions. [2025-03-17 20:26:18,239 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34099 states and 62423 transitions. [2025-03-17 20:26:18,364 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 32505 [2025-03-17 20:26:18,550 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34099 states to 34099 states and 62423 transitions. [2025-03-17 20:26:18,550 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34099 [2025-03-17 20:26:18,631 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34099 [2025-03-17 20:26:18,631 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34099 states and 62423 transitions. [2025-03-17 20:26:18,662 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:18,662 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34099 states and 62423 transitions. [2025-03-17 20:26:18,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34099 states and 62423 transitions. [2025-03-17 20:26:19,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34099 to 34099. [2025-03-17 20:26:19,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34099 states, 34099 states have (on average 1.830640194727118) internal successors, (62423), 34098 states have internal predecessors, (62423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:19,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34099 states to 34099 states and 62423 transitions. [2025-03-17 20:26:19,357 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34099 states and 62423 transitions. [2025-03-17 20:26:19,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:19,358 INFO L432 stractBuchiCegarLoop]: Abstraction has 34099 states and 62423 transitions. [2025-03-17 20:26:19,358 INFO L338 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2025-03-17 20:26:19,358 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34099 states and 62423 transitions. [2025-03-17 20:26:19,450 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 32505 [2025-03-17 20:26:19,450 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:19,450 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:19,457 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:19,457 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:19,457 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:19,458 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~6#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:19,458 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:19,458 INFO L85 PathProgramCache]: Analyzing trace with hash -201132907, now seen corresponding path program 1 times [2025-03-17 20:26:19,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:19,458 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [122188561] [2025-03-17 20:26:19,458 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:19,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:19,470 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:19,473 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:19,473 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:19,473 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:19,502 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:19,503 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:19,503 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [122188561] [2025-03-17 20:26:19,503 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [122188561] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:19,503 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:19,503 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:19,503 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [739515228] [2025-03-17 20:26:19,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:19,503 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:19,504 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:19,504 INFO L85 PathProgramCache]: Analyzing trace with hash -958379046, now seen corresponding path program 1 times [2025-03-17 20:26:19,504 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:19,504 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271046531] [2025-03-17 20:26:19,504 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:19,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:19,514 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:19,516 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:19,516 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:19,516 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:19,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:19,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:19,530 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271046531] [2025-03-17 20:26:19,530 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271046531] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:19,530 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:19,530 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:19,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [11921890] [2025-03-17 20:26:19,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:19,531 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:19,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:19,531 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:26:19,531 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:26:19,532 INFO L87 Difference]: Start difference. First operand 34099 states and 62423 transitions. cyclomatic complexity: 28328 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:20,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:20,270 INFO L93 Difference]: Finished difference Result 49595 states and 91098 transitions. [2025-03-17 20:26:20,270 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49595 states and 91098 transitions. [2025-03-17 20:26:20,448 INFO L131 ngComponentsAnalysis]: Automaton has 15 accepting balls. 47840 [2025-03-17 20:26:20,594 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49595 states to 49462 states and 90923 transitions. [2025-03-17 20:26:20,595 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49462 [2025-03-17 20:26:20,636 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49462 [2025-03-17 20:26:20,636 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49462 states and 90923 transitions. [2025-03-17 20:26:20,688 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:20,688 INFO L218 hiAutomatonCegarLoop]: Abstraction has 49462 states and 90923 transitions. [2025-03-17 20:26:20,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49462 states and 90923 transitions. [2025-03-17 20:26:21,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49462 to 37649. [2025-03-17 20:26:21,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37649 states, 37649 states have (on average 1.828972881085819) internal successors, (68859), 37648 states have internal predecessors, (68859), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:21,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37649 states to 37649 states and 68859 transitions. [2025-03-17 20:26:21,400 INFO L240 hiAutomatonCegarLoop]: Abstraction has 37649 states and 68859 transitions. [2025-03-17 20:26:21,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:26:21,401 INFO L432 stractBuchiCegarLoop]: Abstraction has 37649 states and 68859 transitions. [2025-03-17 20:26:21,401 INFO L338 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2025-03-17 20:26:21,401 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 37649 states and 68859 transitions. [2025-03-17 20:26:21,524 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 36036 [2025-03-17 20:26:21,524 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:21,524 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:21,531 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:21,532 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:21,532 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:21,532 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:21,532 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:21,533 INFO L85 PathProgramCache]: Analyzing trace with hash -201132907, now seen corresponding path program 2 times [2025-03-17 20:26:21,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:21,533 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [43159201] [2025-03-17 20:26:21,533 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:21,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:21,547 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:21,550 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:21,550 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:21,550 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:21,588 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:21,588 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:21,588 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [43159201] [2025-03-17 20:26:21,588 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [43159201] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:21,588 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:21,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:21,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [172869730] [2025-03-17 20:26:21,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:21,589 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:21,591 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:21,591 INFO L85 PathProgramCache]: Analyzing trace with hash 1467154918, now seen corresponding path program 1 times [2025-03-17 20:26:21,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:21,591 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1465601889] [2025-03-17 20:26:21,591 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:21,591 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:21,603 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:21,606 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:21,607 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:21,607 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:21,675 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:21,676 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:21,676 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1465601889] [2025-03-17 20:26:21,676 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1465601889] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:21,676 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:21,676 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:21,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [844912885] [2025-03-17 20:26:21,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:21,676 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:21,676 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:21,677 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:21,677 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:21,677 INFO L87 Difference]: Start difference. First operand 37649 states and 68859 transitions. cyclomatic complexity: 31216 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:22,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:22,134 INFO L93 Difference]: Finished difference Result 38394 states and 69639 transitions. [2025-03-17 20:26:22,134 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38394 states and 69639 transitions. [2025-03-17 20:26:22,503 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 36718 [2025-03-17 20:26:22,600 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38394 states to 38394 states and 69639 transitions. [2025-03-17 20:26:22,601 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38394 [2025-03-17 20:26:22,633 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38394 [2025-03-17 20:26:22,633 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38394 states and 69639 transitions. [2025-03-17 20:26:22,659 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:22,659 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38394 states and 69639 transitions. [2025-03-17 20:26:22,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38394 states and 69639 transitions. [2025-03-17 20:26:22,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38394 to 38059. [2025-03-17 20:26:22,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38059 states, 38059 states have (on average 1.8189127407446333) internal successors, (69226), 38058 states have internal predecessors, (69226), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:22,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38059 states to 38059 states and 69226 transitions. [2025-03-17 20:26:22,985 INFO L240 hiAutomatonCegarLoop]: Abstraction has 38059 states and 69226 transitions. [2025-03-17 20:26:22,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:26:22,986 INFO L432 stractBuchiCegarLoop]: Abstraction has 38059 states and 69226 transitions. [2025-03-17 20:26:22,986 INFO L338 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2025-03-17 20:26:22,986 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38059 states and 69226 transitions. [2025-03-17 20:26:23,086 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 36401 [2025-03-17 20:26:23,086 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:23,086 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:23,095 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:23,095 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:23,095 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:23,096 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~6#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:23,096 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:23,096 INFO L85 PathProgramCache]: Analyzing trace with hash -1950355298, now seen corresponding path program 1 times [2025-03-17 20:26:23,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:23,096 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [442623410] [2025-03-17 20:26:23,096 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:23,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:23,116 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:26:23,119 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:26:23,119 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:23,119 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:23,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:23,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:23,148 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [442623410] [2025-03-17 20:26:23,148 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [442623410] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:23,148 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:23,148 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:23,148 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1629574615] [2025-03-17 20:26:23,148 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:23,149 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:23,150 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:23,150 INFO L85 PathProgramCache]: Analyzing trace with hash -198487499, now seen corresponding path program 1 times [2025-03-17 20:26:23,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:23,150 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [941995093] [2025-03-17 20:26:23,150 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:23,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:23,188 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:26:23,199 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:26:23,199 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:23,199 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:23,494 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:23,495 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:23,495 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [941995093] [2025-03-17 20:26:23,495 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [941995093] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:23,495 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:23,495 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:23,495 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [935035892] [2025-03-17 20:26:23,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:23,495 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:23,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:23,496 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:26:23,496 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:26:23,496 INFO L87 Difference]: Start difference. First operand 38059 states and 69226 transitions. cyclomatic complexity: 31173 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:24,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:24,005 INFO L93 Difference]: Finished difference Result 53094 states and 96837 transitions. [2025-03-17 20:26:24,005 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53094 states and 96837 transitions. [2025-03-17 20:26:24,202 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 51436 [2025-03-17 20:26:24,353 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53094 states to 53094 states and 96837 transitions. [2025-03-17 20:26:24,354 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53094 [2025-03-17 20:26:24,395 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53094 [2025-03-17 20:26:24,395 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53094 states and 96837 transitions. [2025-03-17 20:26:24,431 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:24,431 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53094 states and 96837 transitions. [2025-03-17 20:26:24,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53094 states and 96837 transitions. [2025-03-17 20:26:24,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53094 to 52959. [2025-03-17 20:26:24,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52959 states, 52959 states have (on average 1.8258841745501238) internal successors, (96697), 52958 states have internal predecessors, (96697), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:25,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52959 states to 52959 states and 96697 transitions. [2025-03-17 20:26:25,081 INFO L240 hiAutomatonCegarLoop]: Abstraction has 52959 states and 96697 transitions. [2025-03-17 20:26:25,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:26:25,081 INFO L432 stractBuchiCegarLoop]: Abstraction has 52959 states and 96697 transitions. [2025-03-17 20:26:25,081 INFO L338 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2025-03-17 20:26:25,081 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52959 states and 96697 transitions. [2025-03-17 20:26:25,221 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 51301 [2025-03-17 20:26:25,221 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:25,221 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:25,229 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:25,229 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:25,229 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:25,229 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume !(2 == buttonForFloorIsPressed_~floorID#1);" "assume !(3 == buttonForFloorIsPressed_~floorID#1);" "assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~6#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret19#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret19#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret19#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:25,230 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:25,230 INFO L85 PathProgramCache]: Analyzing trace with hash -1950355298, now seen corresponding path program 2 times [2025-03-17 20:26:25,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:25,230 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [471123935] [2025-03-17 20:26:25,230 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:25,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:25,241 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:26:25,244 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:26:25,244 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:25,244 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:25,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:25,267 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:25,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [471123935] [2025-03-17 20:26:25,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [471123935] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:25,267 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:25,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:25,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1272889558] [2025-03-17 20:26:25,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:25,268 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:25,268 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:25,268 INFO L85 PathProgramCache]: Analyzing trace with hash 698699631, now seen corresponding path program 1 times [2025-03-17 20:26:25,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:25,268 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343585040] [2025-03-17 20:26:25,268 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:25,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:25,276 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:26:25,279 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:26:25,279 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:25,279 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:25,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:25,307 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:25,307 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [343585040] [2025-03-17 20:26:25,307 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [343585040] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:25,307 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:25,307 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:25,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1297141864] [2025-03-17 20:26:25,308 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:25,308 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:25,308 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:25,308 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:25,309 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:25,309 INFO L87 Difference]: Start difference. First operand 52959 states and 96697 transitions. cyclomatic complexity: 43744 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:26,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:26,346 INFO L93 Difference]: Finished difference Result 54423 states and 99199 transitions. [2025-03-17 20:26:26,346 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54423 states and 99199 transitions. [2025-03-17 20:26:26,599 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 52743 [2025-03-17 20:26:26,776 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54423 states to 54401 states and 99155 transitions. [2025-03-17 20:26:26,777 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 54401 [2025-03-17 20:26:26,824 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 54401 [2025-03-17 20:26:26,824 INFO L73 IsDeterministic]: Start isDeterministic. Operand 54401 states and 99155 transitions. [2025-03-17 20:26:26,865 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:26,865 INFO L218 hiAutomatonCegarLoop]: Abstraction has 54401 states and 99155 transitions. [2025-03-17 20:26:26,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54401 states and 99155 transitions. [2025-03-17 20:26:27,491 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54401 to 53337. [2025-03-17 20:26:27,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53337 states, 53337 states have (on average 1.8224309578716462) internal successors, (97203), 53336 states have internal predecessors, (97203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:27,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53337 states to 53337 states and 97203 transitions. [2025-03-17 20:26:27,634 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53337 states and 97203 transitions. [2025-03-17 20:26:27,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:26:27,634 INFO L432 stractBuchiCegarLoop]: Abstraction has 53337 states and 97203 transitions. [2025-03-17 20:26:27,634 INFO L338 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2025-03-17 20:26:27,635 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53337 states and 97203 transitions. [2025-03-17 20:26:27,791 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51679 [2025-03-17 20:26:27,791 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:27,791 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:27,800 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:27,800 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:27,801 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:27,801 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:27,801 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:27,802 INFO L85 PathProgramCache]: Analyzing trace with hash -1950355298, now seen corresponding path program 3 times [2025-03-17 20:26:27,802 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:27,802 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1630524448] [2025-03-17 20:26:27,802 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:26:27,802 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:27,814 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:26:27,816 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:26:27,816 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:26:27,816 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:27,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:27,838 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:27,838 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1630524448] [2025-03-17 20:26:27,838 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1630524448] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:27,838 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:27,838 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:27,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [160774857] [2025-03-17 20:26:27,839 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:27,839 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:27,839 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:27,839 INFO L85 PathProgramCache]: Analyzing trace with hash -1773191498, now seen corresponding path program 1 times [2025-03-17 20:26:27,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:27,839 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1324836049] [2025-03-17 20:26:27,839 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:27,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:27,848 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:26:27,850 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:26:27,850 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:27,850 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:27,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:27,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:27,881 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1324836049] [2025-03-17 20:26:27,881 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1324836049] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:27,881 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:27,881 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:27,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1458325479] [2025-03-17 20:26:27,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:27,881 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:27,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:27,881 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:27,881 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:27,882 INFO L87 Difference]: Start difference. First operand 53337 states and 97203 transitions. cyclomatic complexity: 43870 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:28,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:28,222 INFO L93 Difference]: Finished difference Result 53131 states and 96802 transitions. [2025-03-17 20:26:28,222 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53131 states and 96802 transitions. [2025-03-17 20:26:28,709 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51676 [2025-03-17 20:26:28,843 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53131 states to 53131 states and 96802 transitions. [2025-03-17 20:26:28,843 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53131 [2025-03-17 20:26:28,889 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53131 [2025-03-17 20:26:28,890 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53131 states and 96802 transitions. [2025-03-17 20:26:28,928 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:28,929 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53131 states and 96802 transitions. [2025-03-17 20:26:28,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53131 states and 96802 transitions. [2025-03-17 20:26:29,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53131 to 53110. [2025-03-17 20:26:29,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53110 states, 53110 states have (on average 1.8221992091884767) internal successors, (96777), 53109 states have internal predecessors, (96777), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:29,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53110 states to 53110 states and 96777 transitions. [2025-03-17 20:26:29,681 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53110 states and 96777 transitions. [2025-03-17 20:26:29,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:26:29,682 INFO L432 stractBuchiCegarLoop]: Abstraction has 53110 states and 96777 transitions. [2025-03-17 20:26:29,682 INFO L338 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2025-03-17 20:26:29,682 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53110 states and 96777 transitions. [2025-03-17 20:26:29,776 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51655 [2025-03-17 20:26:29,777 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:29,777 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:29,780 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:29,780 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:29,781 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:29,781 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:29,782 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:29,782 INFO L85 PathProgramCache]: Analyzing trace with hash 714561463, now seen corresponding path program 1 times [2025-03-17 20:26:29,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:29,782 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1925120665] [2025-03-17 20:26:29,782 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:29,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:29,793 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 47 statements into 1 equivalence classes. [2025-03-17 20:26:29,795 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 47 of 47 statements. [2025-03-17 20:26:29,795 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:29,795 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:29,824 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:29,824 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:29,824 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1925120665] [2025-03-17 20:26:29,824 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1925120665] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:29,824 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:29,824 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:29,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2014774506] [2025-03-17 20:26:29,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:29,825 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:29,825 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:29,825 INFO L85 PathProgramCache]: Analyzing trace with hash -1170699943, now seen corresponding path program 1 times [2025-03-17 20:26:29,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:29,825 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [711795337] [2025-03-17 20:26:29,825 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:29,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:29,835 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-17 20:26:29,837 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-17 20:26:29,838 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:29,838 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:29,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:29,875 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:29,875 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [711795337] [2025-03-17 20:26:29,875 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [711795337] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:29,875 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:29,875 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:29,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [448749005] [2025-03-17 20:26:29,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:29,875 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:29,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:29,876 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:26:29,876 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:26:29,876 INFO L87 Difference]: Start difference. First operand 53110 states and 96777 transitions. cyclomatic complexity: 43671 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:30,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:30,031 INFO L93 Difference]: Finished difference Result 53110 states and 96771 transitions. [2025-03-17 20:26:30,031 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53110 states and 96771 transitions. [2025-03-17 20:26:30,248 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51655 [2025-03-17 20:26:30,409 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53110 states to 53110 states and 96771 transitions. [2025-03-17 20:26:30,409 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53110 [2025-03-17 20:26:30,454 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53110 [2025-03-17 20:26:30,455 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53110 states and 96771 transitions. [2025-03-17 20:26:30,497 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:30,497 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53110 states and 96771 transitions. [2025-03-17 20:26:30,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53110 states and 96771 transitions. [2025-03-17 20:26:31,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53110 to 53110. [2025-03-17 20:26:31,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53110 states, 53110 states have (on average 1.8220862361137262) internal successors, (96771), 53109 states have internal predecessors, (96771), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:31,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53110 states to 53110 states and 96771 transitions. [2025-03-17 20:26:31,358 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53110 states and 96771 transitions. [2025-03-17 20:26:31,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:26:31,359 INFO L432 stractBuchiCegarLoop]: Abstraction has 53110 states and 96771 transitions. [2025-03-17 20:26:31,359 INFO L338 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2025-03-17 20:26:31,359 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53110 states and 96771 transitions. [2025-03-17 20:26:31,531 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51655 [2025-03-17 20:26:31,531 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:31,531 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:31,536 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:31,536 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:31,536 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:31,537 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:31,537 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:31,538 INFO L85 PathProgramCache]: Analyzing trace with hash -2108473128, now seen corresponding path program 1 times [2025-03-17 20:26:31,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:31,538 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [505108198] [2025-03-17 20:26:31,538 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:31,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:31,552 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 52 statements into 1 equivalence classes. [2025-03-17 20:26:31,555 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-17 20:26:31,556 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:31,556 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:31,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:31,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:31,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [505108198] [2025-03-17 20:26:31,626 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [505108198] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:31,626 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:31,626 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:26:31,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1980670116] [2025-03-17 20:26:31,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:31,626 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:31,627 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:31,627 INFO L85 PathProgramCache]: Analyzing trace with hash -1170699943, now seen corresponding path program 2 times [2025-03-17 20:26:31,627 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:31,627 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1468412956] [2025-03-17 20:26:31,627 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:31,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:31,640 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 50 statements into 1 equivalence classes. [2025-03-17 20:26:31,643 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-17 20:26:31,644 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:31,644 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:31,686 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:31,686 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:31,686 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1468412956] [2025-03-17 20:26:31,686 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1468412956] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:31,687 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:31,687 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:31,687 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1880057291] [2025-03-17 20:26:31,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:31,687 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:31,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:31,687 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:31,687 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:31,688 INFO L87 Difference]: Start difference. First operand 53110 states and 96771 transitions. cyclomatic complexity: 43665 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:32,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:32,011 INFO L93 Difference]: Finished difference Result 53577 states and 97504 transitions. [2025-03-17 20:26:32,011 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53577 states and 97504 transitions. [2025-03-17 20:26:32,508 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 52109 [2025-03-17 20:26:32,646 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53577 states to 53577 states and 97504 transitions. [2025-03-17 20:26:32,647 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53577 [2025-03-17 20:26:32,692 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53577 [2025-03-17 20:26:32,693 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53577 states and 97504 transitions. [2025-03-17 20:26:32,727 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:32,728 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53577 states and 97504 transitions. [2025-03-17 20:26:32,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53577 states and 97504 transitions. [2025-03-17 20:26:33,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53577 to 53434. [2025-03-17 20:26:33,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53434 states, 53434 states have (on average 1.8206385447467905) internal successors, (97284), 53433 states have internal predecessors, (97284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:33,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53434 states to 53434 states and 97284 transitions. [2025-03-17 20:26:33,192 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53434 states and 97284 transitions. [2025-03-17 20:26:33,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:33,193 INFO L432 stractBuchiCegarLoop]: Abstraction has 53434 states and 97284 transitions. [2025-03-17 20:26:33,193 INFO L338 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2025-03-17 20:26:33,193 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53434 states and 97284 transitions. [2025-03-17 20:26:33,528 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51967 [2025-03-17 20:26:33,529 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:33,529 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:33,533 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:33,533 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:33,533 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:33,534 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:33,534 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:33,534 INFO L85 PathProgramCache]: Analyzing trace with hash -2108473128, now seen corresponding path program 2 times [2025-03-17 20:26:33,534 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:33,534 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1477942399] [2025-03-17 20:26:33,534 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:33,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:33,548 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 52 statements into 1 equivalence classes. [2025-03-17 20:26:33,551 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-17 20:26:33,551 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:33,551 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:33,605 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:33,605 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:33,605 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1477942399] [2025-03-17 20:26:33,605 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1477942399] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:33,605 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:33,605 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:26:33,605 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367178406] [2025-03-17 20:26:33,605 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:33,605 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:33,606 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:33,606 INFO L85 PathProgramCache]: Analyzing trace with hash -1304713449, now seen corresponding path program 1 times [2025-03-17 20:26:33,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:33,606 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036257164] [2025-03-17 20:26:33,606 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:33,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:33,617 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-17 20:26:33,619 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-17 20:26:33,620 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:33,620 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:33,646 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:33,646 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:33,646 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036257164] [2025-03-17 20:26:33,646 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036257164] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:33,646 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:33,646 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:33,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1927220148] [2025-03-17 20:26:33,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:33,647 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:33,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:33,647 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:33,647 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:33,648 INFO L87 Difference]: Start difference. First operand 53434 states and 97284 transitions. cyclomatic complexity: 43854 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:34,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:34,076 INFO L93 Difference]: Finished difference Result 53467 states and 97303 transitions. [2025-03-17 20:26:34,076 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53467 states and 97303 transitions. [2025-03-17 20:26:34,311 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51995 [2025-03-17 20:26:34,473 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53467 states to 53467 states and 97303 transitions. [2025-03-17 20:26:34,473 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53467 [2025-03-17 20:26:34,518 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53467 [2025-03-17 20:26:34,518 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53467 states and 97303 transitions. [2025-03-17 20:26:34,556 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:34,557 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53467 states and 97303 transitions. [2025-03-17 20:26:34,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53467 states and 97303 transitions. [2025-03-17 20:26:35,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53467 to 53363. [2025-03-17 20:26:35,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53363 states, 53363 states have (on average 1.821205704326968) internal successors, (97185), 53362 states have internal predecessors, (97185), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:35,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53363 states to 53363 states and 97185 transitions. [2025-03-17 20:26:35,363 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53363 states and 97185 transitions. [2025-03-17 20:26:35,363 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-17 20:26:35,363 INFO L432 stractBuchiCegarLoop]: Abstraction has 53363 states and 97185 transitions. [2025-03-17 20:26:35,364 INFO L338 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2025-03-17 20:26:35,365 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53363 states and 97185 transitions. [2025-03-17 20:26:35,531 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:35,532 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:35,532 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:35,537 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:35,540 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:35,540 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:35,541 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:35,542 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:35,542 INFO L85 PathProgramCache]: Analyzing trace with hash -2108473128, now seen corresponding path program 3 times [2025-03-17 20:26:35,542 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:35,542 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [284633187] [2025-03-17 20:26:35,542 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:26:35,542 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:35,555 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 52 statements into 1 equivalence classes. [2025-03-17 20:26:35,561 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-17 20:26:35,561 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:26:35,561 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:35,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:35,666 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:35,666 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [284633187] [2025-03-17 20:26:35,666 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [284633187] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:35,666 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:35,666 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-17 20:26:35,666 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769278787] [2025-03-17 20:26:35,666 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:35,667 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:35,667 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:35,667 INFO L85 PathProgramCache]: Analyzing trace with hash -841012789, now seen corresponding path program 1 times [2025-03-17 20:26:35,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:35,667 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1284366786] [2025-03-17 20:26:35,667 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:35,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:35,702 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:26:35,704 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:26:35,704 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:35,705 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:35,757 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:35,758 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:35,758 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1284366786] [2025-03-17 20:26:35,758 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1284366786] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:35,758 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:35,758 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:26:35,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [11083142] [2025-03-17 20:26:35,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:35,758 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:35,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:35,759 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-17 20:26:35,759 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-17 20:26:35,759 INFO L87 Difference]: Start difference. First operand 53363 states and 97185 transitions. cyclomatic complexity: 43826 Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 6 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:35,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:35,953 INFO L93 Difference]: Finished difference Result 53357 states and 97172 transitions. [2025-03-17 20:26:35,953 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53357 states and 97172 transitions. [2025-03-17 20:26:36,500 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:36,663 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53357 states to 53357 states and 97172 transitions. [2025-03-17 20:26:36,664 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53357 [2025-03-17 20:26:36,710 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53357 [2025-03-17 20:26:36,710 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53357 states and 97172 transitions. [2025-03-17 20:26:36,749 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:36,749 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53357 states and 97172 transitions. [2025-03-17 20:26:36,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53357 states and 97172 transitions. [2025-03-17 20:26:37,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53357 to 53357. [2025-03-17 20:26:37,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53357 states, 53357 states have (on average 1.8211668572071142) internal successors, (97172), 53356 states have internal predecessors, (97172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:37,408 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53357 states to 53357 states and 97172 transitions. [2025-03-17 20:26:37,408 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53357 states and 97172 transitions. [2025-03-17 20:26:37,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-17 20:26:37,409 INFO L432 stractBuchiCegarLoop]: Abstraction has 53357 states and 97172 transitions. [2025-03-17 20:26:37,409 INFO L338 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2025-03-17 20:26:37,409 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53357 states and 97172 transitions. [2025-03-17 20:26:37,600 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:37,600 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:37,600 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:37,606 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:37,606 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:37,606 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:37,607 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret25#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:37,608 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:37,608 INFO L85 PathProgramCache]: Analyzing trace with hash 670254499, now seen corresponding path program 1 times [2025-03-17 20:26:37,608 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:37,608 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [759968474] [2025-03-17 20:26:37,608 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:37,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:37,623 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 53 statements into 1 equivalence classes. [2025-03-17 20:26:37,626 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 53 of 53 statements. [2025-03-17 20:26:37,626 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:37,626 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:37,879 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:37,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:37,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [759968474] [2025-03-17 20:26:37,880 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [759968474] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:37,880 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:37,880 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:37,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1476801468] [2025-03-17 20:26:37,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:37,880 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:37,881 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:37,881 INFO L85 PathProgramCache]: Analyzing trace with hash -1097415584, now seen corresponding path program 1 times [2025-03-17 20:26:37,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:37,881 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1293387705] [2025-03-17 20:26:37,881 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:37,881 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:37,894 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:26:37,896 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:26:37,897 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:37,897 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:37,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:37,954 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:37,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1293387705] [2025-03-17 20:26:37,955 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1293387705] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:37,955 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:37,955 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:26:37,955 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [687969601] [2025-03-17 20:26:37,955 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:37,955 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:37,955 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:37,955 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:37,955 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:37,956 INFO L87 Difference]: Start difference. First operand 53357 states and 97172 transitions. cyclomatic complexity: 43819 Second operand has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:38,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:38,176 INFO L93 Difference]: Finished difference Result 53364 states and 97180 transitions. [2025-03-17 20:26:38,176 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53364 states and 97180 transitions. [2025-03-17 20:26:38,398 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:38,570 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53364 states to 53364 states and 97180 transitions. [2025-03-17 20:26:38,570 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53364 [2025-03-17 20:26:38,615 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53364 [2025-03-17 20:26:38,615 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53364 states and 97180 transitions. [2025-03-17 20:26:38,655 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:38,656 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53364 states and 97180 transitions. [2025-03-17 20:26:38,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53364 states and 97180 transitions. [2025-03-17 20:26:39,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53364 to 53357. [2025-03-17 20:26:39,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53357 states, 53357 states have (on average 1.8210918904736024) internal successors, (97168), 53356 states have internal predecessors, (97168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:39,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53357 states to 53357 states and 97168 transitions. [2025-03-17 20:26:39,607 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53357 states and 97168 transitions. [2025-03-17 20:26:39,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:26:39,608 INFO L432 stractBuchiCegarLoop]: Abstraction has 53357 states and 97168 transitions. [2025-03-17 20:26:39,611 INFO L338 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2025-03-17 20:26:39,611 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53357 states and 97168 transitions. [2025-03-17 20:26:39,749 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:39,749 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:39,749 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:39,754 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:39,754 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:39,754 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:39,754 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret25#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:39,755 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:39,755 INFO L85 PathProgramCache]: Analyzing trace with hash 1190407375, now seen corresponding path program 1 times [2025-03-17 20:26:39,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:39,755 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [756238651] [2025-03-17 20:26:39,755 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:39,755 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:39,766 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 54 statements into 1 equivalence classes. [2025-03-17 20:26:39,768 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 54 of 54 statements. [2025-03-17 20:26:39,768 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:39,768 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:39,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:39,799 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:39,799 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [756238651] [2025-03-17 20:26:39,799 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [756238651] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:39,799 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:39,799 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:39,799 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987741475] [2025-03-17 20:26:39,799 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:39,800 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:39,800 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:39,800 INFO L85 PathProgramCache]: Analyzing trace with hash -1097415584, now seen corresponding path program 2 times [2025-03-17 20:26:39,800 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:39,800 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1917171451] [2025-03-17 20:26:39,800 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:39,800 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:39,811 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:26:39,813 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:26:39,813 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:39,813 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:39,862 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:39,862 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:39,862 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1917171451] [2025-03-17 20:26:39,862 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1917171451] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:39,862 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:39,862 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:26:39,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [854592844] [2025-03-17 20:26:39,863 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:39,863 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:39,863 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:39,863 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:39,863 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:39,863 INFO L87 Difference]: Start difference. First operand 53357 states and 97168 transitions. cyclomatic complexity: 43815 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:40,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:40,066 INFO L93 Difference]: Finished difference Result 53364 states and 97176 transitions. [2025-03-17 20:26:40,066 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53364 states and 97176 transitions. [2025-03-17 20:26:40,311 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:40,490 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53364 states to 53364 states and 97176 transitions. [2025-03-17 20:26:40,490 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53364 [2025-03-17 20:26:40,538 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53364 [2025-03-17 20:26:40,538 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53364 states and 97176 transitions. [2025-03-17 20:26:40,580 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:40,580 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53364 states and 97176 transitions. [2025-03-17 20:26:40,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53364 states and 97176 transitions. [2025-03-17 20:26:41,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53364 to 53357. [2025-03-17 20:26:41,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53357 states, 53357 states have (on average 1.8210169237400904) internal successors, (97164), 53356 states have internal predecessors, (97164), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:41,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53357 states to 53357 states and 97164 transitions. [2025-03-17 20:26:41,703 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53357 states and 97164 transitions. [2025-03-17 20:26:41,704 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:26:41,704 INFO L432 stractBuchiCegarLoop]: Abstraction has 53357 states and 97164 transitions. [2025-03-17 20:26:41,704 INFO L338 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2025-03-17 20:26:41,704 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53357 states and 97164 transitions. [2025-03-17 20:26:41,846 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:41,846 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:41,846 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:41,851 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:41,851 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:41,851 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:41,852 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret25#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:41,852 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:41,852 INFO L85 PathProgramCache]: Analyzing trace with hash -2048529434, now seen corresponding path program 1 times [2025-03-17 20:26:41,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:41,853 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494141506] [2025-03-17 20:26:41,853 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:41,853 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:41,863 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 55 statements into 1 equivalence classes. [2025-03-17 20:26:41,866 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 55 of 55 statements. [2025-03-17 20:26:41,866 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:41,866 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:41,897 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:41,897 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:41,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494141506] [2025-03-17 20:26:41,898 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494141506] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:41,898 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:41,898 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:41,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441420524] [2025-03-17 20:26:41,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:41,898 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:41,898 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:41,898 INFO L85 PathProgramCache]: Analyzing trace with hash -1025029026, now seen corresponding path program 1 times [2025-03-17 20:26:41,898 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:41,898 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [283722864] [2025-03-17 20:26:41,899 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:41,899 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:41,909 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:26:41,911 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:26:41,911 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:41,911 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:42,009 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:42,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:42,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [283722864] [2025-03-17 20:26:42,009 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [283722864] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:42,009 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:42,009 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2025-03-17 20:26:42,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318465471] [2025-03-17 20:26:42,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:42,009 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:42,009 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:42,009 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:42,009 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:42,010 INFO L87 Difference]: Start difference. First operand 53357 states and 97164 transitions. cyclomatic complexity: 43811 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:42,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:42,221 INFO L93 Difference]: Finished difference Result 53364 states and 97172 transitions. [2025-03-17 20:26:42,221 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53364 states and 97172 transitions. [2025-03-17 20:26:42,782 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:42,961 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53364 states to 53364 states and 97172 transitions. [2025-03-17 20:26:42,961 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53364 [2025-03-17 20:26:43,010 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53364 [2025-03-17 20:26:43,010 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53364 states and 97172 transitions. [2025-03-17 20:26:43,050 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:43,050 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53364 states and 97172 transitions. [2025-03-17 20:26:43,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53364 states and 97172 transitions. [2025-03-17 20:26:43,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53364 to 53357. [2025-03-17 20:26:43,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53357 states, 53357 states have (on average 1.8209419570065783) internal successors, (97160), 53356 states have internal predecessors, (97160), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:43,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53357 states to 53357 states and 97160 transitions. [2025-03-17 20:26:43,663 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53357 states and 97160 transitions. [2025-03-17 20:26:43,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:26:43,664 INFO L432 stractBuchiCegarLoop]: Abstraction has 53357 states and 97160 transitions. [2025-03-17 20:26:43,664 INFO L338 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2025-03-17 20:26:43,664 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53357 states and 97160 transitions. [2025-03-17 20:26:43,828 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:43,828 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:43,828 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:43,833 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:43,833 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:43,834 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume !(4 == initPersonOnFloor_~floor#1);" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:43,834 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret25#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:43,835 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:43,835 INFO L85 PathProgramCache]: Analyzing trace with hash -433330155, now seen corresponding path program 1 times [2025-03-17 20:26:43,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:43,835 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2831232] [2025-03-17 20:26:43,835 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:43,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:43,849 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 55 statements into 1 equivalence classes. [2025-03-17 20:26:43,852 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 55 of 55 statements. [2025-03-17 20:26:43,852 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:43,852 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:43,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:43,892 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:43,892 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2831232] [2025-03-17 20:26:43,892 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2831232] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:43,892 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:43,892 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:43,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [312170466] [2025-03-17 20:26:43,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:43,893 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:43,893 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:43,893 INFO L85 PathProgramCache]: Analyzing trace with hash -1025029026, now seen corresponding path program 2 times [2025-03-17 20:26:43,893 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:43,893 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1065519188] [2025-03-17 20:26:43,893 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:43,893 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:43,907 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:26:43,910 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:26:43,910 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:43,910 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:44,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:44,172 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:44,172 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1065519188] [2025-03-17 20:26:44,172 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1065519188] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:44,172 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:44,172 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:44,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1177313198] [2025-03-17 20:26:44,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:44,173 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:44,173 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:44,173 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:44,173 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:44,174 INFO L87 Difference]: Start difference. First operand 53357 states and 97160 transitions. cyclomatic complexity: 43807 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:44,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:44,322 INFO L93 Difference]: Finished difference Result 53336 states and 97126 transitions. [2025-03-17 20:26:44,322 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53336 states and 97126 transitions. [2025-03-17 20:26:44,519 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:44,693 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53336 states to 53336 states and 97126 transitions. [2025-03-17 20:26:44,693 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53336 [2025-03-17 20:26:44,736 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53336 [2025-03-17 20:26:44,736 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53336 states and 97126 transitions. [2025-03-17 20:26:44,773 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:44,773 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53336 states and 97126 transitions. [2025-03-17 20:26:44,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53336 states and 97126 transitions. [2025-03-17 20:26:45,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53336 to 53336. [2025-03-17 20:26:45,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53336 states, 53336 states have (on average 1.8210214489275536) internal successors, (97126), 53335 states have internal predecessors, (97126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:45,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53336 states to 53336 states and 97126 transitions. [2025-03-17 20:26:45,694 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53336 states and 97126 transitions. [2025-03-17 20:26:45,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:26:45,696 INFO L432 stractBuchiCegarLoop]: Abstraction has 53336 states and 97126 transitions. [2025-03-17 20:26:45,696 INFO L338 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2025-03-17 20:26:45,696 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53336 states and 97126 transitions. [2025-03-17 20:26:45,815 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:45,815 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:45,815 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:45,819 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:45,819 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:45,820 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:45,820 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:45,820 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:45,821 INFO L85 PathProgramCache]: Analyzing trace with hash -1560162190, now seen corresponding path program 1 times [2025-03-17 20:26:45,821 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:45,821 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [220717637] [2025-03-17 20:26:45,821 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:45,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:45,832 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 56 statements into 1 equivalence classes. [2025-03-17 20:26:45,834 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 56 of 56 statements. [2025-03-17 20:26:45,835 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:45,835 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:45,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:45,868 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:45,868 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [220717637] [2025-03-17 20:26:45,868 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [220717637] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:45,868 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:45,868 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:45,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1429467118] [2025-03-17 20:26:45,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:45,868 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:45,869 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:45,869 INFO L85 PathProgramCache]: Analyzing trace with hash -768626231, now seen corresponding path program 1 times [2025-03-17 20:26:45,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:45,869 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [259865931] [2025-03-17 20:26:45,869 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:45,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:45,880 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:26:45,883 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:26:45,884 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:45,884 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:45,911 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:45,912 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:45,912 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [259865931] [2025-03-17 20:26:45,912 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [259865931] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:45,912 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:45,913 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:45,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [143912711] [2025-03-17 20:26:45,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:45,914 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:45,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:45,915 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:45,915 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:45,915 INFO L87 Difference]: Start difference. First operand 53336 states and 97126 transitions. cyclomatic complexity: 43794 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:46,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:46,075 INFO L93 Difference]: Finished difference Result 53336 states and 97125 transitions. [2025-03-17 20:26:46,075 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53336 states and 97125 transitions. [2025-03-17 20:26:46,274 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:46,425 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53336 states to 53336 states and 97125 transitions. [2025-03-17 20:26:46,426 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53336 [2025-03-17 20:26:46,469 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53336 [2025-03-17 20:26:46,469 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53336 states and 97125 transitions. [2025-03-17 20:26:46,505 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:46,505 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53336 states and 97125 transitions. [2025-03-17 20:26:46,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53336 states and 97125 transitions. [2025-03-17 20:26:47,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53336 to 53336. [2025-03-17 20:26:47,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53336 states, 53336 states have (on average 1.8210026998650068) internal successors, (97125), 53335 states have internal predecessors, (97125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:47,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53336 states to 53336 states and 97125 transitions. [2025-03-17 20:26:47,265 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53336 states and 97125 transitions. [2025-03-17 20:26:47,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:26:47,270 INFO L432 stractBuchiCegarLoop]: Abstraction has 53336 states and 97125 transitions. [2025-03-17 20:26:47,270 INFO L338 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2025-03-17 20:26:47,270 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53336 states and 97125 transitions. [2025-03-17 20:26:47,422 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:47,423 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:47,423 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:47,428 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:47,428 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:47,428 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret119#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1;" "main_#t~ret119#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret119#1;havoc main_#t~ret119#1;" "assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;havoc bigMacCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume !(0 == getOrigin_~person#1);" "assume !(1 == getOrigin_~person#1);" "assume !(2 == getOrigin_~person#1);" "assume !(3 == getOrigin_~person#1);" "assume !(4 == getOrigin_~person#1);" "assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bigMacCall_#t~ret112#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~21#1 := bigMacCall_#t~ret112#1;havoc bigMacCall_#t~ret112#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume 1 == initPersonOnFloor_~floor#1;" "assume !(0 == initPersonOnFloor_~person#1);" "assume !(1 == initPersonOnFloor_~person#1);" "assume !(2 == initPersonOnFloor_~person#1);" "assume !(3 == initPersonOnFloor_~person#1);" "assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bigMacCall_#t~ret112#1, bigMacCall_~tmp~21#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret113#1, cleanup_#t~ret114#1, cleanup_~i~1#1, cleanup_~tmp~22#1, cleanup_~tmp___0~7#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~22#1;havoc cleanup_~tmp___0~7#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "stopRequestedInDirection__wrappee__empty_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~1#1 := stopRequestedInDirection__wrappee__empty_#t~ret15#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret15#1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0;" [2025-03-17 20:26:47,428 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1;" "cleanup_#t~ret113#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~7#1 := cleanup_#t~ret113#1;havoc cleanup_#t~ret113#1;" "assume 1 != cleanup_~tmp___0~7#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1;" "anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1;" "isIdle_#t~ret12#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1;" "cleanup_#t~ret114#1 := isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~22#1 := cleanup_#t~ret114#1;havoc cleanup_#t~ret114#1;" "assume !(0 != cleanup_~tmp~22#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3);" "assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1;" "stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1;" "timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;" "assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;" "assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1;" "stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1;" "assume 0 != stopRequestedInDirection_~overload~0#1;" "assume 0 != stopRequestedInDirection_~buttonPressed~0#1;assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, 0, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1);" "assume !(~currentFloorID~0 < 0);" "assume !(~currentFloorID~0 < 0);" "assume ~currentFloorID~0 < 1;" "assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1);" "assume ~currentFloorID~0 < 1;" "assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;" "stopRequestedInDirection_#t~ret25#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1;" "timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;" "assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1;" "timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1;" "continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1;" "assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~27#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1;" "__utac_acc__Specification2_spec__3_#t~ret126#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~27#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~27#1;" "assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1;" "assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1;" "__utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1;" "assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0;" "havoc __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_#t~ret131#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~27#1, __utac_acc__Specification2_spec__3_~tmp___0~11#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1;" [2025-03-17 20:26:47,429 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:47,429 INFO L85 PathProgramCache]: Analyzing trace with hash -1489486295, now seen corresponding path program 1 times [2025-03-17 20:26:47,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:47,429 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639699441] [2025-03-17 20:26:47,429 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:47,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:47,449 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 57 statements into 1 equivalence classes. [2025-03-17 20:26:47,452 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 57 of 57 statements. [2025-03-17 20:26:47,452 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:47,453 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:47,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:47,484 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:47,484 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639699441] [2025-03-17 20:26:47,484 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639699441] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:47,484 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:47,484 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:47,484 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [984630739] [2025-03-17 20:26:47,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:47,484 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:47,485 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:47,485 INFO L85 PathProgramCache]: Analyzing trace with hash -1097415584, now seen corresponding path program 3 times [2025-03-17 20:26:47,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:47,485 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901202028] [2025-03-17 20:26:47,485 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-17 20:26:47,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:47,496 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 59 statements into 1 equivalence classes. [2025-03-17 20:26:47,499 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 59 of 59 statements. [2025-03-17 20:26:47,499 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-17 20:26:47,499 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:47,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:47,541 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:47,541 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901202028] [2025-03-17 20:26:47,541 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901202028] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:47,541 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:47,541 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:26:47,541 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [110478758] [2025-03-17 20:26:47,541 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:47,542 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:47,542 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:47,542 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:47,542 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:47,542 INFO L87 Difference]: Start difference. First operand 53336 states and 97125 transitions. cyclomatic complexity: 43793 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:47,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:47,707 INFO L93 Difference]: Finished difference Result 53336 states and 97124 transitions. [2025-03-17 20:26:47,708 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53336 states and 97124 transitions. [2025-03-17 20:26:47,915 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 51891 [2025-03-17 20:26:48,056 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53336 states to 53336 states and 97124 transitions. [2025-03-17 20:26:48,057 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53336 [2025-03-17 20:26:48,096 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53336 [2025-03-17 20:26:48,096 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53336 states and 97124 transitions. [2025-03-17 20:26:48,131 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:48,131 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53336 states and 97124 transitions. [2025-03-17 20:26:48,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53336 states and 97124 transitions.