./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 21dc9f7e2ddd4ffb05ac36477bf46e7266bc68ad137742c8de338dbab6571869 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-14 15:52:01,779 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-14 15:52:01,782 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-14 15:52:01,801 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-14 15:52:01,801 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-14 15:52:01,802 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-14 15:52:01,803 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-14 15:52:01,804 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-14 15:52:01,805 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-14 15:52:01,806 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-14 15:52:01,807 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-14 15:52:01,808 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-14 15:52:01,808 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-14 15:52:01,809 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-14 15:52:01,809 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-14 15:52:01,810 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-14 15:52:01,811 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-14 15:52:01,811 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-14 15:52:01,813 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-14 15:52:01,814 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-14 15:52:01,815 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-14 15:52:01,816 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-14 15:52:01,816 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-14 15:52:01,817 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-14 15:52:01,818 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-14 15:52:01,820 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-14 15:52:01,820 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-14 15:52:01,820 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-14 15:52:01,821 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-14 15:52:01,821 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-14 15:52:01,822 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-14 15:52:01,822 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-14 15:52:01,823 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-14 15:52:01,823 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-14 15:52:01,824 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-14 15:52:01,824 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-14 15:52:01,825 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-14 15:52:01,825 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-14 15:52:01,826 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-14 15:52:01,826 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-14 15:52:01,826 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-14 15:52:01,827 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-14 15:52:01,828 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-14 15:52:01,842 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-14 15:52:01,842 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-14 15:52:01,842 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-14 15:52:01,843 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-14 15:52:01,843 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-14 15:52:01,844 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-14 15:52:01,844 INFO L138 SettingsManager]: * Use SBE=true [2022-07-14 15:52:01,844 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-14 15:52:01,844 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-14 15:52:01,844 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-14 15:52:01,845 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-14 15:52:01,845 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-14 15:52:01,845 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-14 15:52:01,845 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-14 15:52:01,845 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-14 15:52:01,845 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-14 15:52:01,846 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-14 15:52:01,846 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-14 15:52:01,846 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-14 15:52:01,846 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-14 15:52:01,846 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-14 15:52:01,847 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-14 15:52:01,847 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-14 15:52:01,847 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-14 15:52:01,847 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-14 15:52:01,847 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-14 15:52:01,847 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-14 15:52:01,848 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-14 15:52:01,848 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-14 15:52:01,848 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-14 15:52:01,848 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-14 15:52:01,849 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-14 15:52:01,849 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 21dc9f7e2ddd4ffb05ac36477bf46e7266bc68ad137742c8de338dbab6571869 [2022-07-14 15:52:02,033 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-14 15:52:02,047 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-14 15:52:02,049 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-14 15:52:02,050 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-14 15:52:02,050 INFO L275 PluginConnector]: CDTParser initialized [2022-07-14 15:52:02,051 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c [2022-07-14 15:52:02,102 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/49e7d7f77/b68682e81d5e4383afb76a21bc94a022/FLAG8bc95d57c [2022-07-14 15:52:02,555 INFO L306 CDTParser]: Found 1 translation units. [2022-07-14 15:52:02,556 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c [2022-07-14 15:52:02,570 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/49e7d7f77/b68682e81d5e4383afb76a21bc94a022/FLAG8bc95d57c [2022-07-14 15:52:02,592 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/49e7d7f77/b68682e81d5e4383afb76a21bc94a022 [2022-07-14 15:52:02,594 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-14 15:52:02,595 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-14 15:52:02,596 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-14 15:52:02,596 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-14 15:52:02,598 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-14 15:52:02,599 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:52:02" (1/1) ... [2022-07-14 15:52:02,599 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5cf75f35 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:02, skipping insertion in model container [2022-07-14 15:52:02,600 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:52:02" (1/1) ... [2022-07-14 15:52:02,604 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-14 15:52:02,637 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-14 15:52:02,831 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c[5910,5923] [2022-07-14 15:52:03,057 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:52:03,065 INFO L203 MainTranslator]: Completed pre-run [2022-07-14 15:52:03,077 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c[5910,5923] [2022-07-14 15:52:03,120 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:52:03,138 INFO L208 MainTranslator]: Completed translation [2022-07-14 15:52:03,138 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03 WrapperNode [2022-07-14 15:52:03,139 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-14 15:52:03,139 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-14 15:52:03,140 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-14 15:52:03,140 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-14 15:52:03,146 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,177 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,358 INFO L137 Inliner]: procedures = 97, calls = 346, calls flagged for inlining = 199, calls inlined = 440, statements flattened = 14252 [2022-07-14 15:52:03,372 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-14 15:52:03,373 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-14 15:52:03,373 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-14 15:52:03,373 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-14 15:52:03,379 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,379 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,399 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,400 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,497 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,548 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,563 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,584 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-14 15:52:03,586 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-14 15:52:03,586 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-14 15:52:03,586 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-14 15:52:03,587 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (1/1) ... [2022-07-14 15:52:03,592 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:03,599 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:03,625 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:03,646 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-14 15:52:03,650 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-14 15:52:03,651 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-14 15:52:03,651 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-14 15:52:03,651 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-14 15:52:03,755 INFO L234 CfgBuilder]: Building ICFG [2022-07-14 15:52:03,756 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-14 15:52:07,644 INFO L275 CfgBuilder]: Performing block encoding [2022-07-14 15:52:07,666 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-14 15:52:07,666 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-14 15:52:07,670 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:52:07 BoogieIcfgContainer [2022-07-14 15:52:07,671 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-14 15:52:07,671 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-14 15:52:07,672 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-14 15:52:07,674 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-14 15:52:07,674 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:52:07,674 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 14.07 03:52:02" (1/3) ... [2022-07-14 15:52:07,675 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@19ec6f6a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:52:07, skipping insertion in model container [2022-07-14 15:52:07,675 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:52:07,675 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:52:03" (2/3) ... [2022-07-14 15:52:07,676 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@19ec6f6a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:52:07, skipping insertion in model container [2022-07-14 15:52:07,676 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:52:07,676 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:52:07" (3/3) ... [2022-07-14 15:52:07,677 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec9_product31.cil.c [2022-07-14 15:52:07,749 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-14 15:52:07,749 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-14 15:52:07,749 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-14 15:52:07,749 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-14 15:52:07,749 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-14 15:52:07,749 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-14 15:52:07,749 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-14 15:52:07,750 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-14 15:52:07,761 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:07,849 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1855 [2022-07-14 15:52:07,849 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:07,849 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:07,877 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:07,877 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:07,877 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-14 15:52:07,886 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:07,919 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1855 [2022-07-14 15:52:07,920 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:07,920 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:07,926 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:07,927 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:07,936 INFO L752 eck$LassoCheckResult]: Stem: 2370#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3662#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 25#L2763true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2892#L2756true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1498#L2771true main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1406#L3478true assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 3053#L3453true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2392#L978true assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2118#L95true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1818#L120true bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2195#L653true assume 0 == initPersonOnFloor_~floor#1; 2472#L654true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3376#L761-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 282#L445true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1821#L457-2true assume { :end_inline_callOnFloor } true; 201#L797true assume { :end_inline_initPersonOnFloor } true; 421#L3258true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1049#L382true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3615#L409true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2502#L2724true stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 579#L2109true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 847#L1372true stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 3474#L2113true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1378#L2126true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 50#L2261true assume !(0 != timeShift_~tmp___9~2#1); 2984#L2352true assume 1 == ~doorState~0;~doorState~0 := 0; 3159#L2352-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 739#L382-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3121#L409-3true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2813#L2724-1true stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1850#L1964true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1702#L1372-3true stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1902#L1977true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1758#L2360true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 2206#L2021true assume !(1 == ~currentHeading~0); 539#L2031true assume !(0 == ~currentFloorID~0); 1285#L2031-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 871#L2037-1true assume { :end_inline_continueInDirection } true; 1448#L2369-2true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 650#L1372-5true __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 2614#L1432-6true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2492#L1464-6true __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 3234#L1021true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1862#L1031-1true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 777#L2384true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1739#L3285-2true [2022-07-14 15:52:07,937 INFO L754 eck$LassoCheckResult]: Loop: 1739#L3285-2true assume !false; 747#L3286true cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 3736#L3289true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1860#L1195true cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1286#L3293true assume 1 != cleanup_~tmp___0~12#1; 1879#L3293-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1018#L382-65true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 145#L409-65true anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 2323#L1480true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 452#L1544true isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 3002#L1557true cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 3686#L3305true assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1469#L382-70true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 72#L409-70true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 606#L2724-3true stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 291#L2109-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2099#L1372-6true stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 3168#L2113-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 933#L2126-1true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2296#L2261-2true assume !(0 != timeShift_~tmp___9~2#1); 653#L2352-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2490#L2352-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 340#L382-73true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3552#L409-73true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1297#L2724-4true stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1642#L1964-2true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 729#L1372-9true stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1327#L1977-2true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2618#L2360-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1927#L2021-3true assume !(1 == ~currentHeading~0); 47#L2031-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1330#L2031-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3571#L2037-7true assume { :end_inline_continueInDirection } true; 2935#L2369-5true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1588#L1372-11true __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 873#L1432-13true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2628#L1464-13true __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1046#L1021-2true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2743#L1031-3true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2233#L2384-1true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1739#L3285-2true [2022-07-14 15:52:07,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:07,957 INFO L85 PathProgramCache]: Analyzing trace with hash -1924247499, now seen corresponding path program 1 times [2022-07-14 15:52:07,962 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:07,963 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [321957599] [2022-07-14 15:52:07,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:07,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:08,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:08,212 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:08,213 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:08,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [321957599] [2022-07-14 15:52:08,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [321957599] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:08,214 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:08,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:52:08,216 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1266424702] [2022-07-14 15:52:08,216 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:08,219 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:08,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:08,221 INFO L85 PathProgramCache]: Analyzing trace with hash 39229735, now seen corresponding path program 1 times [2022-07-14 15:52:08,221 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:08,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625794200] [2022-07-14 15:52:08,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:08,222 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:08,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:08,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:08,329 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:08,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625794200] [2022-07-14 15:52:08,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625794200] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:08,330 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:08,330 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:52:08,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1376740216] [2022-07-14 15:52:08,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:08,331 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:08,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:08,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:52:08,367 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:52:08,375 INFO L87 Difference]: Start difference. First operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:14,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:14,207 INFO L93 Difference]: Finished difference Result 31753 states and 58868 transitions. [2022-07-14 15:52:14,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-14 15:52:14,211 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31753 states and 58868 transitions. [2022-07-14 15:52:14,392 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 13868 [2022-07-14 15:52:14,539 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31753 states to 31573 states and 58670 transitions. [2022-07-14 15:52:14,541 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31573 [2022-07-14 15:52:14,575 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31573 [2022-07-14 15:52:14,576 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31573 states and 58670 transitions. [2022-07-14 15:52:14,619 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:52:14,620 INFO L369 hiAutomatonCegarLoop]: Abstraction has 31573 states and 58670 transitions. [2022-07-14 15:52:14,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31573 states and 58670 transitions. [2022-07-14 15:52:14,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31573 to 10643. [2022-07-14 15:52:14,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10643 states, 10643 states have (on average 1.8623508409283096) internal successors, (19821), 10642 states have internal predecessors, (19821), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:14,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10643 states to 10643 states and 19821 transitions. [2022-07-14 15:52:14,896 INFO L392 hiAutomatonCegarLoop]: Abstraction has 10643 states and 19821 transitions. [2022-07-14 15:52:14,951 INFO L374 stractBuchiCegarLoop]: Abstraction has 10643 states and 19821 transitions. [2022-07-14 15:52:14,951 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-14 15:52:14,951 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10643 states and 19821 transitions. [2022-07-14 15:52:14,977 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5377 [2022-07-14 15:52:14,977 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:14,977 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:14,980 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:14,980 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:14,980 INFO L752 eck$LassoCheckResult]: Stem: 38992#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 38993#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 35603#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 35604#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 38194#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 38092#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 38093#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 39004#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 38802#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 36808#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 38553#L653 assume 0 == initPersonOnFloor_~floor#1; 38859#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 35947#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 36208#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 35827#L457-2 assume { :end_inline_callOnFloor } true; 36033#L797 assume { :end_inline_initPersonOnFloor } true; 36034#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 36510#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 37588#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 39515#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 36801#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 36803#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 39490#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39491#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 44253#L2261 assume !(0 != timeShift_~tmp___9~2#1); 44254#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 45670#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 45669#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 45668#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45667#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 45665#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 38423#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 38424#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 38479#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 38480#L2021 assume !(1 == ~currentHeading~0); 36730#L2031 assume !(0 == ~currentFloorID~0); 36731#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37316#L2037-1 assume { :end_inline_continueInDirection } true; 37317#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 36927#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 36928#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 36266#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 39081#L1021 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 35624#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 38594#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 43167#L3285-2 [2022-07-14 15:52:14,980 INFO L754 eck$LassoCheckResult]: Loop: 43167#L3285-2 assume !false; 43163#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 43158#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 43144#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 42885#L3293 assume 1 != cleanup_~tmp___0~12#1; 42775#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 42774#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 35903#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 35904#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 42759#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 42756#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 41535#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 41534#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 39551#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 40971#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 39756#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 39758#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 39745#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39411#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 45339#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 45340#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 45841#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 45840#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 45839#L409-73 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45838#L2724-4 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 45836#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 37066#L1372-9 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 37067#L1977-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 37983#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 38652#L2021-3 assume !(1 == ~currentHeading~0); 35659#L2031-9 assume !(0 == ~currentFloorID~0); 35660#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37986#L2037-7 assume { :end_inline_continueInDirection } true; 36163#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 43222#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 43221#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 43215#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 43213#L1021-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 43201#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 43172#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 43167#L3285-2 [2022-07-14 15:52:14,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:14,981 INFO L85 PathProgramCache]: Analyzing trace with hash -1924247499, now seen corresponding path program 2 times [2022-07-14 15:52:14,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:14,982 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2544545] [2022-07-14 15:52:14,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:14,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:14,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:15,010 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:15,010 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:15,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2544545] [2022-07-14 15:52:15,010 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2544545] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:15,011 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:15,011 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:52:15,011 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1535858515] [2022-07-14 15:52:15,011 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:15,011 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:15,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:15,012 INFO L85 PathProgramCache]: Analyzing trace with hash -353797275, now seen corresponding path program 1 times [2022-07-14 15:52:15,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:15,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [582453350] [2022-07-14 15:52:15,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:15,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:15,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:15,044 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:15,045 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:15,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [582453350] [2022-07-14 15:52:15,046 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [582453350] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:15,046 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:15,046 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:52:15,047 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1483434793] [2022-07-14 15:52:15,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:15,047 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:15,047 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:15,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:15,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:15,048 INFO L87 Difference]: Start difference. First operand 10643 states and 19821 transitions. cyclomatic complexity: 9180 Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:15,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:15,321 INFO L93 Difference]: Finished difference Result 26359 states and 49073 transitions. [2022-07-14 15:52:15,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:52:15,322 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26359 states and 49073 transitions. [2022-07-14 15:52:15,434 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 18489 [2022-07-14 15:52:15,520 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26359 states to 26359 states and 49073 transitions. [2022-07-14 15:52:15,521 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26359 [2022-07-14 15:52:15,543 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26359 [2022-07-14 15:52:15,544 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26359 states and 49073 transitions. [2022-07-14 15:52:15,790 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:52:15,791 INFO L369 hiAutomatonCegarLoop]: Abstraction has 26359 states and 49073 transitions. [2022-07-14 15:52:15,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26359 states and 49073 transitions. [2022-07-14 15:52:16,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26359 to 10655. [2022-07-14 15:52:16,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10655 states, 10655 states have (on average 1.8613796339746598) internal successors, (19833), 10654 states have internal predecessors, (19833), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:16,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10655 states to 10655 states and 19833 transitions. [2022-07-14 15:52:16,193 INFO L392 hiAutomatonCegarLoop]: Abstraction has 10655 states and 19833 transitions. [2022-07-14 15:52:16,193 INFO L374 stractBuchiCegarLoop]: Abstraction has 10655 states and 19833 transitions. [2022-07-14 15:52:16,194 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-14 15:52:16,194 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10655 states and 19833 transitions. [2022-07-14 15:52:16,216 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5383 [2022-07-14 15:52:16,216 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:16,216 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:16,220 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:16,221 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:16,221 INFO L752 eck$LassoCheckResult]: Stem: 76020#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 76021#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 72616#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 72617#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 75215#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 75104#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 75105#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 76035#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 75836#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 73814#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 75570#L653 assume 0 == initPersonOnFloor_~floor#1; 75895#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 72959#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 73219#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 72839#L457-2 assume { :end_inline_callOnFloor } true; 73044#L797 assume { :end_inline_initPersonOnFloor } true; 73045#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 73521#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 74606#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 76111#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 73807#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 73808#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 74283#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 76543#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 77037#L2261 assume !(0 != timeShift_~tmp___9~2#1); 77034#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 77033#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 77031#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 76718#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 76283#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 75598#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 75449#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 75450#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 75501#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 75502#L2021 assume !(1 == ~currentHeading~0); 73740#L2031 assume !(0 == ~currentFloorID~0); 73741#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74326#L2037-1 assume { :end_inline_continueInDirection } true; 74327#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 75159#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 76164#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 73409#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 80287#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 80279#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 80282#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 80274#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 80272#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 80271#L3285-2 [2022-07-14 15:52:16,222 INFO L754 eck$LassoCheckResult]: Loop: 80271#L3285-2 assume !false; 80270#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 80269#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 80259#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 80258#L3293 assume 1 != cleanup_~tmp___0~12#1; 80255#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 80254#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 80237#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 80220#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 80160#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 80120#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 80119#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 80118#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 79002#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 80117#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 80090#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 80091#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 81078#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 74423#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 74424#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 73940#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 73941#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 73353#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 73354#L409-73 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 74960#L2724-4 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 74961#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 74076#L1372-9 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 74077#L1977-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 75001#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 75672#L2021-3 assume !(1 == ~currentHeading~0); 72671#L2031-9 assume !(0 == ~currentFloorID~0); 72672#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75004#L2037-7 assume { :end_inline_continueInDirection } true; 73174#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 75324#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 75325#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 74040#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 74601#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 74079#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 74080#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 72725#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 80273#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 80271#L3285-2 [2022-07-14 15:52:16,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:16,222 INFO L85 PathProgramCache]: Analyzing trace with hash 1929156568, now seen corresponding path program 1 times [2022-07-14 15:52:16,222 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:16,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776150554] [2022-07-14 15:52:16,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:16,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:16,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:16,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:16,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:16,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1776150554] [2022-07-14 15:52:16,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1776150554] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:16,267 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:16,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:52:16,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926909192] [2022-07-14 15:52:16,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:16,268 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:16,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:16,268 INFO L85 PathProgramCache]: Analyzing trace with hash -696385528, now seen corresponding path program 1 times [2022-07-14 15:52:16,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:16,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1381400338] [2022-07-14 15:52:16,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:16,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:16,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 15:52:16,287 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-14 15:52:16,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 15:52:16,313 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-14 15:52:17,625 INFO L210 LassoAnalysis]: Preferences: [2022-07-14 15:52:17,626 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-14 15:52:17,626 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-14 15:52:17,626 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-14 15:52:17,626 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-07-14 15:52:17,626 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:17,626 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-14 15:52:17,626 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-14 15:52:17,627 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product31.cil.c_Iteration3_Loop [2022-07-14 15:52:17,627 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-14 15:52:17,627 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-14 15:52:17,659 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,680 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,682 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,687 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,690 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,691 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,824 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,833 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,835 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,846 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,879 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,903 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,913 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,915 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:17,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:18,530 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-14 15:52:18,531 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-07-14 15:52:18,533 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,533 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,539 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,543 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,543 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,554 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,554 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret12#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,567 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-07-14 15:52:18,577 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2022-07-14 15:52:18,578 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,578 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,579 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,580 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-07-14 15:52:18,582 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,582 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,603 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,603 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret21#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret21#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,625 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:18,625 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,625 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,626 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,658 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,659 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,668 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-07-14 15:52:18,680 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,680 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~16#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp~16#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,702 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:18,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,703 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,705 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,706 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-07-14 15:52:18,707 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,707 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,730 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,731 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~16#1=1, ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~16#1=1, ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,753 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:18,753 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,754 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,756 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,758 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-07-14 15:52:18,758 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,758 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,780 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,780 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,804 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2022-07-14 15:52:18,805 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,805 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,806 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,807 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-07-14 15:52:18,810 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,810 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,817 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,818 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret62#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret62#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,840 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:18,840 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,840 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,842 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,843 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-07-14 15:52:18,855 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,855 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,874 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,874 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,899 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:18,899 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,899 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,901 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,902 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-07-14 15:52:18,904 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,904 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,925 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,925 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,948 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:18,948 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,948 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,949 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,950 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-07-14 15:52:18,951 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,951 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:18,959 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:18,959 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:18,983 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:18,984 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:18,984 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:18,985 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:18,989 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-07-14 15:52:18,989 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:18,990 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,025 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,025 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-8, ~calls_0~0=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=-8, ULTIMATE.start_isFloorCalling_#res#1=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0#1=-8, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~14#1=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-8} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-8, ~calls_0~0=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=-8, ULTIMATE.start_isFloorCalling_#res#1=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0#1=-8, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~14#1=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,048 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,048 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,048 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,050 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,054 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,054 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,066 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-07-14 15:52:19,067 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,067 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~tmp~7#1=1, ULTIMATE.start_anyStopRequested_#res#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~12#1=1} Honda state: {ULTIMATE.start_isIdle_~tmp~7#1=1, ULTIMATE.start_anyStopRequested_#res#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~12#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,090 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,091 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,092 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,093 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-07-14 15:52:19,095 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,095 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,102 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,103 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret11#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,125 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2022-07-14 15:52:19,126 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,126 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,127 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,128 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-07-14 15:52:19,129 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,130 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,143 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,143 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,168 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,168 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,168 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,169 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,171 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-07-14 15:52:19,171 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,172 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,179 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,179 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret20#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret20#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,201 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,202 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,202 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,203 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,204 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-07-14 15:52:19,206 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,206 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,228 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,228 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,245 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2022-07-14 15:52:19,246 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,246 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,247 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,268 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-07-14 15:52:19,270 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,270 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,290 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,290 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret47#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,313 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2022-07-14 15:52:19,314 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,314 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,315 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,316 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-07-14 15:52:19,318 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,318 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,331 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,331 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,384 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,385 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,385 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,386 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,387 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-07-14 15:52:19,388 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,389 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,409 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,409 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,427 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,427 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,427 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,428 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,436 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,436 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,445 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-07-14 15:52:19,453 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,454 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret132#1=0} Honda state: {ULTIMATE.start_cleanup_#t~ret132#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,470 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,471 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,471 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,472 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,473 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-07-14 15:52:19,474 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,474 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,495 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,495 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~6#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,512 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,513 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,513 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,514 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,515 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-07-14 15:52:19,516 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,516 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,529 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,529 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20#1=0, ULTIMATE.start_timeShift_~tmp___9~2#1=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20#1=0, ULTIMATE.start_timeShift_~tmp___9~2#1=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,554 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,555 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,555 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,556 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,557 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-07-14 15:52:19,558 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,558 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,570 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,570 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~1#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~1#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,592 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2022-07-14 15:52:19,593 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,593 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,594 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,595 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-07-14 15:52:19,597 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,597 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,618 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:52:19,618 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret37#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret37#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:52:19,635 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,635 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,635 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,636 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,637 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2022-07-14 15:52:19,639 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:52:19,639 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:19,676 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:19,677 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:19,677 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:19,678 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:19,679 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2022-07-14 15:52:19,680 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-07-14 15:52:19,680 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:52:20,143 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-07-14 15:52:20,147 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:20,147 INFO L210 LassoAnalysis]: Preferences: [2022-07-14 15:52:20,147 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-14 15:52:20,147 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-14 15:52:20,147 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-14 15:52:20,148 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-07-14 15:52:20,148 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:20,148 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-14 15:52:20,148 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-14 15:52:20,148 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product31.cil.c_Iteration3_Loop [2022-07-14 15:52:20,148 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-14 15:52:20,148 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-14 15:52:20,150 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,168 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,177 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,278 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,309 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,318 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,325 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,326 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:52:20,806 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-14 15:52:20,813 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-07-14 15:52:20,814 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:20,814 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:20,815 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:20,835 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2022-07-14 15:52:20,836 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:20,844 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:20,844 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:20,845 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:20,845 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:20,845 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:20,846 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:20,846 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:20,860 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:20,881 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:20,882 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:20,882 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:20,883 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:20,896 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2022-07-14 15:52:20,896 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:20,904 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:20,904 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:20,904 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:20,904 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:20,904 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:20,906 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:20,906 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:20,935 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:20,958 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:20,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:20,959 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:20,972 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,003 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2022-07-14 15:52:21,004 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,010 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,010 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,010 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,010 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,010 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,010 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,011 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,022 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,040 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,040 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,040 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,041 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,042 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2022-07-14 15:52:21,043 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,049 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,049 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,049 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,049 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,050 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,050 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,050 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,065 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,080 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,081 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,081 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,082 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,083 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2022-07-14 15:52:21,085 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,090 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,090 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,091 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,091 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,091 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,091 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,091 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,092 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,112 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,113 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,113 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,114 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,116 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,122 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,122 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,122 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,122 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,122 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,122 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,122 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,126 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2022-07-14 15:52:21,134 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,150 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,150 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,150 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,152 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,157 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2022-07-14 15:52:21,158 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,163 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,164 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,164 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,164 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,164 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,164 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,165 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,171 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,187 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,187 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,187 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,188 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,189 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2022-07-14 15:52:21,191 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,196 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,197 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,197 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,197 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,197 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,197 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,197 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,202 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,217 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,218 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,218 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,220 INFO L229 MonitoredProcess]: Starting monitored process 35 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,221 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2022-07-14 15:52:21,222 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,229 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,229 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,229 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,229 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,229 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,230 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,230 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,231 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,251 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2022-07-14 15:52:21,251 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,252 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,253 INFO L229 MonitoredProcess]: Starting monitored process 36 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,282 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2022-07-14 15:52:21,294 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,300 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,300 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,300 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,300 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,300 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,301 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,301 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,303 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,318 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,319 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,319 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,320 INFO L229 MonitoredProcess]: Starting monitored process 37 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,321 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2022-07-14 15:52:21,322 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,328 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,328 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,328 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,328 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-07-14 15:52:21,328 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,332 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-07-14 15:52:21,332 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,337 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,353 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,354 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,354 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,355 INFO L229 MonitoredProcess]: Starting monitored process 38 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,359 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2022-07-14 15:52:21,361 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,366 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,367 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,367 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,367 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,367 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,367 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,367 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,368 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,385 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,385 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,385 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,387 INFO L229 MonitoredProcess]: Starting monitored process 39 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,388 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2022-07-14 15:52:21,390 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,396 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,396 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,396 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,396 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,396 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,397 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,397 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,399 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,416 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,417 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,417 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,418 INFO L229 MonitoredProcess]: Starting monitored process 40 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,420 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2022-07-14 15:52:21,421 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,437 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,437 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,437 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,437 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,437 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,438 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,438 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,439 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,455 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,455 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,455 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,456 INFO L229 MonitoredProcess]: Starting monitored process 41 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,457 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2022-07-14 15:52:21,459 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,465 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,466 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,466 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,466 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,466 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,467 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,467 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,468 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,490 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:21,491 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,491 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,492 INFO L229 MonitoredProcess]: Starting monitored process 42 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,495 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2022-07-14 15:52:21,495 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,503 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,503 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,503 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,503 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-07-14 15:52:21,503 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,506 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-07-14 15:52:21,506 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,509 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:52:21,529 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Ended with exit code 0 [2022-07-14 15:52:21,529 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,530 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,531 INFO L229 MonitoredProcess]: Starting monitored process 43 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,532 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2022-07-14 15:52:21,533 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:52:21,539 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:52:21,539 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:52:21,539 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:52:21,539 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:52:21,539 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:52:21,541 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:52:21,541 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:52:21,556 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-07-14 15:52:21,560 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2022-07-14 15:52:21,560 INFO L444 ModelExtractionUtils]: 6 out of 10 variables were initially zero. Simplification set additionally 2 variables to zero. [2022-07-14 15:52:21,561 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:52:21,561 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:52:21,562 INFO L229 MonitoredProcess]: Starting monitored process 44 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:52:21,563 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2022-07-14 15:52:21,564 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-07-14 15:52:21,564 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-07-14 15:52:21,564 INFO L513 LassoAnalysis]: Proved termination. [2022-07-14 15:52:21,565 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-07-14 15:52:21,580 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Ended with exit code 0 [2022-07-14 15:52:21,582 INFO L293 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-07-14 15:52:21,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:21,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:21,686 INFO L263 TraceCheckSpWp]: Trace formula consists of 613 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-14 15:52:21,688 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 15:52:21,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:21,797 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-14 15:52:21,799 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 15:52:22,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:22,128 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 11 loop predicates [2022-07-14 15:52:22,129 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 10655 states and 19833 transitions. cyclomatic complexity: 9180 Second operand has 13 states, 13 states have (on average 6.846153846153846) internal successors, (89), 13 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:23,188 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Forceful destruction successful, exit code 0 [2022-07-14 15:52:30,601 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 10655 states and 19833 transitions. cyclomatic complexity: 9180. Second operand has 13 states, 13 states have (on average 6.846153846153846) internal successors, (89), 13 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 71394 states and 131819 transitions. Complement of second has 142 states. [2022-07-14 15:52:30,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 72 states 1 stem states 69 non-accepting loop states 1 accepting loop states [2022-07-14 15:52:30,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 6.846153846153846) internal successors, (89), 13 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:30,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 30193 transitions. [2022-07-14 15:52:30,657 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 72 states and 30193 transitions. Stem has 47 letters. Loop has 42 letters. [2022-07-14 15:52:30,661 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-14 15:52:30,661 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 72 states and 30193 transitions. Stem has 89 letters. Loop has 42 letters. [2022-07-14 15:52:30,662 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-14 15:52:30,663 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 72 states and 30193 transitions. Stem has 47 letters. Loop has 84 letters. [2022-07-14 15:52:30,664 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-14 15:52:30,665 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 71394 states and 131819 transitions. [2022-07-14 15:52:31,150 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 22422 [2022-07-14 15:52:31,325 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 71394 states to 66011 states and 121642 transitions. [2022-07-14 15:52:31,326 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38328 [2022-07-14 15:52:31,357 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38333 [2022-07-14 15:52:31,357 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66011 states and 121642 transitions. [2022-07-14 15:52:31,375 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:31,375 INFO L369 hiAutomatonCegarLoop]: Abstraction has 66011 states and 121642 transitions. [2022-07-14 15:52:31,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66011 states and 121642 transitions. [2022-07-14 15:52:31,774 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66011 to 27152. [2022-07-14 15:52:31,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27152 states, 27152 states have (on average 1.8509133765468473) internal successors, (50256), 27151 states have internal predecessors, (50256), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:31,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27152 states to 27152 states and 50256 transitions. [2022-07-14 15:52:31,844 INFO L392 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50256 transitions. [2022-07-14 15:52:31,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:31,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:52:31,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:52:31,846 INFO L87 Difference]: Start difference. First operand 27152 states and 50256 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:31,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:31,952 INFO L93 Difference]: Finished difference Result 27152 states and 50250 transitions. [2022-07-14 15:52:31,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:52:31,953 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27152 states and 50250 transitions. [2022-07-14 15:52:32,036 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 11222 [2022-07-14 15:52:32,256 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27152 states to 27152 states and 50250 transitions. [2022-07-14 15:52:32,256 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18902 [2022-07-14 15:52:32,267 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18902 [2022-07-14 15:52:32,267 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27152 states and 50250 transitions. [2022-07-14 15:52:32,284 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:32,284 INFO L369 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-07-14 15:52:32,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27152 states and 50250 transitions. [2022-07-14 15:52:32,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27152 to 27152. [2022-07-14 15:52:32,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27152 states, 27152 states have (on average 1.8506923983500294) internal successors, (50250), 27151 states have internal predecessors, (50250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:32,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27152 states to 27152 states and 50250 transitions. [2022-07-14 15:52:32,704 INFO L392 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-07-14 15:52:32,705 INFO L374 stractBuchiCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-07-14 15:52:32,705 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-14 15:52:32,705 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27152 states and 50250 transitions. [2022-07-14 15:52:32,768 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 11222 [2022-07-14 15:52:32,769 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:32,769 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:32,770 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:32,770 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:32,771 INFO L752 eck$LassoCheckResult]: Stem: 214759#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 214760#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 209563#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 209564#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 213524#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 213357#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 213358#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 214779#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 214470#L95 assume !(0 == getOrigin_~person#1); 211353#L99 assume !(1 == getOrigin_~person#1); 211354#L103 assume !(2 == getOrigin_~person#1); 215585#L107 assume !(3 == getOrigin_~person#1); 214928#L111 assume !(4 == getOrigin_~person#1); 214287#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 214077#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 214078#L653 assume 0 == initPersonOnFloor_~floor#1; 214558#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 210055#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 210458#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 209883#L457-2 assume { :end_inline_callOnFloor } true; 210188#L797 assume { :end_inline_initPersonOnFloor } true; 210189#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 210913#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 212569#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 214908#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 211344#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 211346#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 212088#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 215642#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 216215#L2261 assume !(0 != timeShift_~tmp___9~2#1); 216209#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 216207#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 211813#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 211814#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 215188#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 214123#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 213883#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 213884#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 216736#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 216735#L2021 assume !(1 == ~currentHeading~0); 216725#L2031 assume !(0 == ~currentFloorID~0); 216707#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 212150#L2037-1 assume { :end_inline_continueInDirection } true; 212151#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 217471#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 217469#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 217463#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 217462#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 217454#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 217457#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 217434#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 217432#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 217428#L3285-2 assume !false; 217429#L3286 [2022-07-14 15:52:32,771 INFO L754 eck$LassoCheckResult]: Loop: 217429#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 234474#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 234473#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 234472#L3293 assume 1 != cleanup_~tmp___0~12#1; 234471#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 234470#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 234456#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 234443#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 234436#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 234431#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 234429#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 234428#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 222282#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 234427#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 234425#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 234424#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 234423#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 215475#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 232268#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 232269#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 235625#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 235624#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 235623#L409-73 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 213123#L2724-4 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 213124#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 230891#L1372-9 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 234414#L1977-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 234412#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 234330#L2021-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 231609#L956-12 continueInDirection_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret40#1;havoc continueInDirection_#t~ret40#1; 231604#L2025-9 assume 0 != continueInDirection_~tmp~11#1;~currentHeading~0 := 0; 231605#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 215677#L2037-7 assume { :end_inline_continueInDirection } true; 210383#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 230932#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 230931#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 230926#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 230924#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 230919#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 230920#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 234477#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 234476#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 234475#L3285-2 assume !false; 217429#L3286 [2022-07-14 15:52:32,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:32,771 INFO L85 PathProgramCache]: Analyzing trace with hash -503275981, now seen corresponding path program 1 times [2022-07-14 15:52:32,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:32,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1213218715] [2022-07-14 15:52:32,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:32,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:32,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:32,807 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:32,808 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:32,808 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1213218715] [2022-07-14 15:52:32,808 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1213218715] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:32,808 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:32,809 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:52:32,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258098178] [2022-07-14 15:52:32,809 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:32,809 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:32,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:32,810 INFO L85 PathProgramCache]: Analyzing trace with hash -389079207, now seen corresponding path program 1 times [2022-07-14 15:52:32,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:32,811 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [920947688] [2022-07-14 15:52:32,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:32,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:32,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:32,965 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:32,965 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:32,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [920947688] [2022-07-14 15:52:32,966 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [920947688] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:32,966 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:32,966 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-07-14 15:52:32,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597843864] [2022-07-14 15:52:32,969 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:32,969 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:32,969 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:32,970 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-14 15:52:32,970 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-07-14 15:52:32,970 INFO L87 Difference]: Start difference. First operand 27152 states and 50250 transitions. cyclomatic complexity: 23105 Second operand has 12 states, 12 states have (on average 3.5833333333333335) internal successors, (43), 12 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:39,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:39,877 INFO L93 Difference]: Finished difference Result 122217 states and 225844 transitions. [2022-07-14 15:52:39,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-07-14 15:52:39,878 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 122217 states and 225844 transitions. [2022-07-14 15:52:40,555 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 56675 [2022-07-14 15:52:40,885 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 122217 states to 122217 states and 225844 transitions. [2022-07-14 15:52:40,886 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 77714 [2022-07-14 15:52:40,946 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 77714 [2022-07-14 15:52:40,946 INFO L73 IsDeterministic]: Start isDeterministic. Operand 122217 states and 225844 transitions. [2022-07-14 15:52:40,948 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:40,948 INFO L369 hiAutomatonCegarLoop]: Abstraction has 122217 states and 225844 transitions. [2022-07-14 15:52:41,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122217 states and 225844 transitions. [2022-07-14 15:52:42,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122217 to 60929. [2022-07-14 15:52:42,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60929 states, 60929 states have (on average 1.84573848249602) internal successors, (112459), 60928 states have internal predecessors, (112459), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:42,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60929 states to 60929 states and 112459 transitions. [2022-07-14 15:52:42,192 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60929 states and 112459 transitions. [2022-07-14 15:52:42,193 INFO L374 stractBuchiCegarLoop]: Abstraction has 60929 states and 112459 transitions. [2022-07-14 15:52:42,193 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-14 15:52:42,193 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60929 states and 112459 transitions. [2022-07-14 15:52:42,472 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:42,472 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:42,472 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:42,474 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:42,474 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:42,474 INFO L752 eck$LassoCheckResult]: Stem: 364438#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 364439#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 359023#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 359024#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 363063#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 362893#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 362894#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 364459#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 364092#L95 assume !(0 == getOrigin_~person#1); 360825#L99 assume !(1 == getOrigin_~person#1); 360826#L103 assume !(2 == getOrigin_~person#1); 365438#L107 assume !(3 == getOrigin_~person#1); 364650#L111 assume !(4 == getOrigin_~person#1); 363892#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 363663#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 363664#L653 assume 0 == initPersonOnFloor_~floor#1; 364197#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 359520#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 359923#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 359348#L457-2 assume { :end_inline_callOnFloor } true; 359650#L797 assume { :end_inline_initPersonOnFloor } true; 359651#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 360378#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 362071#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 364628#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 360817#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 360818#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 365522#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 362830#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 359112#L2261 assume !(0 != timeShift_~tmp___9~2#1); 359113#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 365125#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 361301#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 361302#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 364959#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 363712#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 363454#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 363455#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 363538#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 363539#L2021 assume !(1 == ~currentHeading~0); 367155#L2031 assume !(0 == ~currentFloorID~0); 362627#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 362628#L2037-1 assume { :end_inline_continueInDirection } true; 393495#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 393493#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 393490#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 393485#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 393484#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 393463#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 393466#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 393455#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 393452#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 393453#L3285-2 assume !false; 393443#L3286 [2022-07-14 15:52:42,475 INFO L754 eck$LassoCheckResult]: Loop: 393443#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 393442#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 393441#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 393436#L3293 assume 1 != cleanup_~tmp___0~12#1; 393431#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 393430#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 393419#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 393411#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 393402#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 393401#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 393399#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 372369#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 372370#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 372365#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 372366#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 376936#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 392878#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 392851#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 392843#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 392840#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 392839#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 392837#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 392838#L2263-2 assume !(0 != ~persons_0~0); 394144#L2263-3 assume !(0 != ~persons_1~0); 394139#L2277-1 assume !(0 != ~persons_2~0); 394118#L2291-1 assume !(0 != ~persons_3~0); 394116#L2305-1 assume !(0 != ~persons_4~0); 394080#L2319-1 assume !(0 != ~persons_5~0); 394079#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 394078#L473-12 assume 0 == isPersonOnFloor_~floor#1; 393978#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 393964#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 393962#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 393960#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 393959#L473-14 assume 0 == isPersonOnFloor_~floor#1; 393850#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 393848#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 393846#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 393844#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 393843#L473-16 assume 0 == isPersonOnFloor_~floor#1; 393754#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 393732#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 393730#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 393728#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 393727#L473-18 assume 0 == isPersonOnFloor_~floor#1; 393627#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 393615#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 393613#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 393611#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 393609#L473-20 assume 0 == isPersonOnFloor_~floor#1; 393601#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 393569#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 393567#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 393565#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 393564#L473-22 assume 0 == isPersonOnFloor_~floor#1; 393541#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 393522#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 393520#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 393518#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 393517#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 393512#L429-41 assume { :end_inline_resetCallOnFloor } true; 393511#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 393509#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 393505#L1355-5 assume { :end_inline_resetFloorButton } true; 393504#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 393503#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 393502#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 393494#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 393492#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 393482#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 393473#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 393456#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 393454#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 393444#L3285-2 assume !false; 393443#L3286 [2022-07-14 15:52:42,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:42,476 INFO L85 PathProgramCache]: Analyzing trace with hash -761441419, now seen corresponding path program 1 times [2022-07-14 15:52:42,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:42,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204524886] [2022-07-14 15:52:42,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:42,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:42,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:42,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:42,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:42,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204524886] [2022-07-14 15:52:42,534 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204524886] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:42,534 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:42,534 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:52:42,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [448787448] [2022-07-14 15:52:42,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:42,535 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:42,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:42,535 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 1 times [2022-07-14 15:52:42,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:42,535 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1439577445] [2022-07-14 15:52:42,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:42,536 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:42,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:42,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:42,583 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:42,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1439577445] [2022-07-14 15:52:42,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1439577445] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:42,583 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:42,583 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:42,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1355520400] [2022-07-14 15:52:42,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:42,584 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:42,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:42,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:52:42,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:52:42,585 INFO L87 Difference]: Start difference. First operand 60929 states and 112459 transitions. cyclomatic complexity: 51553 Second operand has 6 states, 6 states have (on average 8.833333333333334) internal successors, (53), 6 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:42,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:42,838 INFO L93 Difference]: Finished difference Result 60923 states and 112446 transitions. [2022-07-14 15:52:42,838 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-14 15:52:42,840 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60923 states and 112446 transitions. [2022-07-14 15:52:43,190 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:43,473 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60923 states to 60923 states and 112446 transitions. [2022-07-14 15:52:43,474 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40257 [2022-07-14 15:52:43,498 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40257 [2022-07-14 15:52:43,498 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60923 states and 112446 transitions. [2022-07-14 15:52:43,500 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:43,500 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112446 transitions. [2022-07-14 15:52:43,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60923 states and 112446 transitions. [2022-07-14 15:52:43,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60923 to 60923. [2022-07-14 15:52:44,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60923 states, 60923 states have (on average 1.8457068758925201) internal successors, (112446), 60922 states have internal predecessors, (112446), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:44,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60923 states to 60923 states and 112446 transitions. [2022-07-14 15:52:44,138 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112446 transitions. [2022-07-14 15:52:44,138 INFO L374 stractBuchiCegarLoop]: Abstraction has 60923 states and 112446 transitions. [2022-07-14 15:52:44,138 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-14 15:52:44,138 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60923 states and 112446 transitions. [2022-07-14 15:52:44,274 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:44,275 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:44,275 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:44,276 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:44,276 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:44,277 INFO L752 eck$LassoCheckResult]: Stem: 486254#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 486255#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 480897#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 480898#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 484943#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 484773#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 484774#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 486275#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 485924#L95 assume !(0 == getOrigin_~person#1); 482705#L99 assume !(1 == getOrigin_~person#1); 482706#L103 assume !(2 == getOrigin_~person#1); 487221#L107 assume !(3 == getOrigin_~person#1); 486444#L111 assume !(4 == getOrigin_~person#1); 485739#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 485514#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 485515#L653 assume !(0 == initPersonOnFloor_~floor#1); 485651#L680 assume 1 == initPersonOnFloor_~floor#1; 482274#L681 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 481394#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 481796#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 481220#L457-2 assume { :end_inline_callOnFloor } true; 481530#L797 assume { :end_inline_initPersonOnFloor } true; 481531#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 482263#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 483953#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 486419#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 482697#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 482698#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 483454#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 484700#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 484701#L2261 assume !(0 != timeShift_~tmp___9~2#1); 486906#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 486907#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 483166#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 483167#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 486752#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 486753#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 487731#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 487694#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 487692#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 487693#L2021 assume !(1 == ~currentHeading~0); 489875#L2031 assume !(0 == ~currentFloorID~0); 489861#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 489855#L2037-1 assume { :end_inline_continueInDirection } true; 489851#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 489845#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 489842#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 489835#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 489836#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 489817#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 489820#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 489797#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 489795#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 489792#L3285-2 assume !false; 489793#L3286 [2022-07-14 15:52:44,277 INFO L754 eck$LassoCheckResult]: Loop: 489793#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 520632#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 520631#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 520630#L3293 assume 1 != cleanup_~tmp___0~12#1; 520629#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 520623#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 520624#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 522494#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 522485#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 522484#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 522483#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 516704#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 516702#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 516699#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 516599#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 516600#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 521444#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 521436#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 521430#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 521425#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 521424#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 521417#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 521414#L2263-2 assume !(0 != ~persons_0~0); 521366#L2263-3 assume !(0 != ~persons_1~0); 521361#L2277-1 assume !(0 != ~persons_2~0); 521340#L2291-1 assume !(0 != ~persons_3~0); 521338#L2305-1 assume !(0 != ~persons_4~0); 521302#L2319-1 assume !(0 != ~persons_5~0); 521301#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 521300#L473-12 assume 0 == isPersonOnFloor_~floor#1; 521269#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 521255#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 521253#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 521251#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 521250#L473-14 assume 0 == isPersonOnFloor_~floor#1; 521204#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 521191#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 521188#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 521186#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 521185#L473-16 assume 0 == isPersonOnFloor_~floor#1; 521169#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 521142#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 521139#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 521137#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 521132#L473-18 assume 0 == isPersonOnFloor_~floor#1; 521043#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 521026#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 521023#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 521021#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 521017#L473-20 assume 0 == isPersonOnFloor_~floor#1; 520898#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 520867#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 520863#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 520861#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 520860#L473-22 assume 0 == isPersonOnFloor_~floor#1; 520818#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 520794#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 520791#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 520789#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 520788#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 520783#L429-41 assume { :end_inline_resetCallOnFloor } true; 520782#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 520780#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 520776#L1355-5 assume { :end_inline_resetFloorButton } true; 520775#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 520774#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 520773#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 520768#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 520766#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 520764#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 520755#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 520751#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 520750#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 520749#L3285-2 assume !false; 489793#L3286 [2022-07-14 15:52:44,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:44,278 INFO L85 PathProgramCache]: Analyzing trace with hash -342341416, now seen corresponding path program 1 times [2022-07-14 15:52:44,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:44,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423028967] [2022-07-14 15:52:44,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:44,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:44,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:44,468 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:44,469 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:44,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423028967] [2022-07-14 15:52:44,469 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423028967] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:44,469 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:44,469 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:52:44,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [984870356] [2022-07-14 15:52:44,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:44,470 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:44,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:44,470 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 2 times [2022-07-14 15:52:44,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:44,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [988513467] [2022-07-14 15:52:44,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:44,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:44,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:44,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:44,516 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:44,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [988513467] [2022-07-14 15:52:44,516 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [988513467] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:44,517 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:44,517 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:44,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117520430] [2022-07-14 15:52:44,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:44,517 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:44,517 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:44,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:44,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:44,518 INFO L87 Difference]: Start difference. First operand 60923 states and 112446 transitions. cyclomatic complexity: 51546 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:44,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:44,745 INFO L93 Difference]: Finished difference Result 60923 states and 112442 transitions. [2022-07-14 15:52:44,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:52:44,746 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60923 states and 112442 transitions. [2022-07-14 15:52:45,130 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:45,260 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60923 states to 60923 states and 112442 transitions. [2022-07-14 15:52:45,260 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40257 [2022-07-14 15:52:45,285 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40257 [2022-07-14 15:52:45,285 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60923 states and 112442 transitions. [2022-07-14 15:52:45,288 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:45,288 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112442 transitions. [2022-07-14 15:52:45,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60923 states and 112442 transitions. [2022-07-14 15:52:45,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60923 to 60923. [2022-07-14 15:52:45,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60923 states, 60923 states have (on average 1.8456412192439637) internal successors, (112442), 60922 states have internal predecessors, (112442), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:45,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60923 states to 60923 states and 112442 transitions. [2022-07-14 15:52:45,984 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112442 transitions. [2022-07-14 15:52:45,984 INFO L374 stractBuchiCegarLoop]: Abstraction has 60923 states and 112442 transitions. [2022-07-14 15:52:45,984 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-14 15:52:45,984 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60923 states and 112442 transitions. [2022-07-14 15:52:46,293 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:46,294 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:46,294 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:46,295 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:46,295 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:46,295 INFO L752 eck$LassoCheckResult]: Stem: 608113#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 608114#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 602759#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 602760#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 606784#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 606619#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 606620#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 608136#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 607778#L95 assume !(0 == getOrigin_~person#1); 604564#L99 assume !(1 == getOrigin_~person#1); 604565#L103 assume !(2 == getOrigin_~person#1); 609069#L107 assume !(3 == getOrigin_~person#1); 608304#L111 assume !(4 == getOrigin_~person#1); 607591#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 607366#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 607367#L653 assume !(0 == initPersonOnFloor_~floor#1); 607503#L680 assume 1 == initPersonOnFloor_~floor#1; 604134#L681 assume !(0 == initPersonOnFloor_~person#1); 604135#L684 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 603257#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 603657#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 603085#L457-2 assume { :end_inline_callOnFloor } true; 603393#L797 assume { :end_inline_initPersonOnFloor } true; 603394#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 604123#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 605808#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 608282#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 604556#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 604557#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 605321#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 606548#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 606549#L2261 assume !(0 != timeShift_~tmp___9~2#1); 608775#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 608776#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 605022#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 605023#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 608620#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 608621#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 609616#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 609617#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 609675#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 609676#L2021 assume !(1 == ~currentHeading~0); 611751#L2031 assume !(0 == ~currentFloorID~0); 611737#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 611731#L2037-1 assume { :end_inline_continueInDirection } true; 611727#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 611721#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 611718#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 611711#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 611712#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 611693#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 611696#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 611673#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 611671#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 611669#L3285-2 assume !false; 605053#L3286 [2022-07-14 15:52:46,296 INFO L754 eck$LassoCheckResult]: Loop: 605053#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 605054#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 607431#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 606360#L3293 assume 1 != cleanup_~tmp___0~12#1; 606361#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 605727#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 603196#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 603197#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 603779#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 604214#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 608792#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 606731#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 602924#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 602925#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 603695#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 603696#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 658097#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 658089#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 658083#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 658078#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 658077#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 658076#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 608828#L2263-2 assume !(0 != ~persons_0~0); 603662#L2263-3 assume !(0 != ~persons_1~0); 603438#L2277-1 assume !(0 != ~persons_2~0); 603331#L2291-1 assume !(0 != ~persons_3~0); 603003#L2305-1 assume !(0 != ~persons_4~0); 603209#L2319-1 assume !(0 != ~persons_5~0); 604445#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 604446#L473-12 assume 0 == isPersonOnFloor_~floor#1; 607845#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 603051#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 602819#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 602795#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 607854#L473-14 assume 0 == isPersonOnFloor_~floor#1; 607925#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 603349#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 607302#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 605646#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 604707#L473-16 assume 0 == isPersonOnFloor_~floor#1; 604708#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 603027#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 603497#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 604836#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 606636#L473-18 assume 0 == isPersonOnFloor_~floor#1; 607595#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 602708#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 607289#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 607562#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 607563#L473-20 assume 0 == isPersonOnFloor_~floor#1; 608422#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 602750#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 604253#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 606411#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 606412#L473-22 assume 0 == isPersonOnFloor_~floor#1; 607346#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 602714#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 605570#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 608086#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 604298#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 604299#L429-41 assume { :end_inline_resetCallOnFloor } true; 607886#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 604342#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 604003#L1355-5 assume { :end_inline_resetFloorButton } true; 608726#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 606960#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 605386#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 604919#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 605802#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 604993#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 604994#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 602915#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 607927#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 607229#L3285-2 assume !false; 605053#L3286 [2022-07-14 15:52:46,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:46,296 INFO L85 PathProgramCache]: Analyzing trace with hash -1574810952, now seen corresponding path program 1 times [2022-07-14 15:52:46,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:46,297 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509611203] [2022-07-14 15:52:46,297 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:46,297 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:46,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:46,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:46,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:46,323 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509611203] [2022-07-14 15:52:46,323 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [509611203] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:46,324 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:46,324 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:52:46,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [721836379] [2022-07-14 15:52:46,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:46,324 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:46,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:46,325 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 3 times [2022-07-14 15:52:46,325 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:46,325 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555584660] [2022-07-14 15:52:46,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:46,325 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:46,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:46,356 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:46,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:46,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555584660] [2022-07-14 15:52:46,356 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555584660] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:46,356 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:46,356 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:46,357 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [918422194] [2022-07-14 15:52:46,357 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:46,357 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:46,357 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:46,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:46,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:46,358 INFO L87 Difference]: Start difference. First operand 60923 states and 112442 transitions. cyclomatic complexity: 51542 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:46,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:46,588 INFO L93 Difference]: Finished difference Result 60923 states and 112438 transitions. [2022-07-14 15:52:46,589 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:52:46,590 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60923 states and 112438 transitions. [2022-07-14 15:52:47,008 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:47,195 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60923 states to 60923 states and 112438 transitions. [2022-07-14 15:52:47,196 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40257 [2022-07-14 15:52:47,228 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40257 [2022-07-14 15:52:47,229 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60923 states and 112438 transitions. [2022-07-14 15:52:47,231 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:47,231 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112438 transitions. [2022-07-14 15:52:47,269 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60923 states and 112438 transitions. [2022-07-14 15:52:47,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60923 to 60923. [2022-07-14 15:52:48,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60923 states, 60923 states have (on average 1.8455755625954073) internal successors, (112438), 60922 states have internal predecessors, (112438), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:48,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60923 states to 60923 states and 112438 transitions. [2022-07-14 15:52:48,139 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112438 transitions. [2022-07-14 15:52:48,140 INFO L374 stractBuchiCegarLoop]: Abstraction has 60923 states and 112438 transitions. [2022-07-14 15:52:48,140 INFO L287 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-07-14 15:52:48,140 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60923 states and 112438 transitions. [2022-07-14 15:52:48,275 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:48,275 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:48,275 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:48,277 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:48,277 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:48,277 INFO L752 eck$LassoCheckResult]: Stem: 729982#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 729983#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 724619#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 724620#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 728646#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 728475#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 728476#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 730002#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 729656#L95 assume !(0 == getOrigin_~person#1); 726418#L99 assume !(1 == getOrigin_~person#1); 726419#L103 assume !(2 == getOrigin_~person#1); 730913#L107 assume !(3 == getOrigin_~person#1); 730170#L111 assume !(4 == getOrigin_~person#1); 729468#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 729239#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 729240#L653 assume !(0 == initPersonOnFloor_~floor#1); 729375#L680 assume 1 == initPersonOnFloor_~floor#1; 725985#L681 assume !(0 == initPersonOnFloor_~person#1); 725986#L684 assume !(1 == initPersonOnFloor_~person#1); 730391#L687 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 725291#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 725513#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 724945#L457-2 assume { :end_inline_callOnFloor } true; 725246#L797 assume { :end_inline_initPersonOnFloor } true; 725247#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 725974#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 727660#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 730147#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 726410#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 726411#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 727166#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 728407#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 728408#L2261 assume !(0 != timeShift_~tmp___9~2#1); 730622#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 730623#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 726876#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 726877#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 730468#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 730469#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 731490#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 731491#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 731695#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 731696#L2021 assume !(1 == ~currentHeading~0); 733675#L2031 assume !(0 == ~currentFloorID~0); 733661#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 733655#L2037-1 assume { :end_inline_continueInDirection } true; 733651#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 733645#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 733642#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 733635#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 733636#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 733617#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 733620#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 733597#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 733595#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 733592#L3285-2 assume !false; 733593#L3286 [2022-07-14 15:52:48,277 INFO L754 eck$LassoCheckResult]: Loop: 733593#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 757656#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 757655#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 757654#L3293 assume 1 != cleanup_~tmp___0~12#1; 757653#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 757652#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 757651#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 748528#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 748514#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 748492#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 748491#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 748029#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 748028#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 748027#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 748024#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 748025#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 755414#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 755407#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 755402#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 754353#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 754352#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 754348#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 754349#L2263-2 assume !(0 != ~persons_0~0); 758127#L2263-3 assume !(0 != ~persons_1~0); 758122#L2277-1 assume !(0 != ~persons_2~0); 758101#L2291-1 assume !(0 != ~persons_3~0); 758099#L2305-1 assume !(0 != ~persons_4~0); 758061#L2319-1 assume !(0 != ~persons_5~0); 758060#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 758059#L473-12 assume 0 == isPersonOnFloor_~floor#1; 758038#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 758025#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 758023#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 758021#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 758019#L473-14 assume 0 == isPersonOnFloor_~floor#1; 757933#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 757931#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 757929#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 757927#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 757926#L473-16 assume 0 == isPersonOnFloor_~floor#1; 757905#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 757883#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 757881#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 757879#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 757877#L473-18 assume 0 == isPersonOnFloor_~floor#1; 757849#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 757837#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 757835#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 757833#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 757832#L473-20 assume 0 == isPersonOnFloor_~floor#1; 757814#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 757776#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 757773#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 757771#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 757770#L473-22 assume 0 == isPersonOnFloor_~floor#1; 757726#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 757702#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 757699#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 757697#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 757696#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 757691#L429-41 assume { :end_inline_resetCallOnFloor } true; 757690#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 757688#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 757684#L1355-5 assume { :end_inline_resetFloorButton } true; 757683#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 757682#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 757681#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 757676#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 757674#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 757672#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 757663#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 757659#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 757658#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 757657#L3285-2 assume !false; 733593#L3286 [2022-07-14 15:52:48,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:48,278 INFO L85 PathProgramCache]: Analyzing trace with hash 522167901, now seen corresponding path program 1 times [2022-07-14 15:52:48,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:48,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2056094779] [2022-07-14 15:52:48,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:48,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:48,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:48,302 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:48,302 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:48,302 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2056094779] [2022-07-14 15:52:48,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2056094779] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:48,303 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:48,303 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:52:48,303 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565718547] [2022-07-14 15:52:48,303 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:48,303 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:48,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:48,304 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 4 times [2022-07-14 15:52:48,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:48,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355403406] [2022-07-14 15:52:48,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:48,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:48,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:48,333 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:48,333 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:48,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355403406] [2022-07-14 15:52:48,333 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355403406] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:48,333 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:48,333 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:48,334 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116148673] [2022-07-14 15:52:48,334 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:48,334 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:48,334 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:48,334 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:48,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:48,335 INFO L87 Difference]: Start difference. First operand 60923 states and 112438 transitions. cyclomatic complexity: 51538 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:48,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:48,564 INFO L93 Difference]: Finished difference Result 60923 states and 112434 transitions. [2022-07-14 15:52:48,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:52:48,565 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60923 states and 112434 transitions. [2022-07-14 15:52:49,053 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:49,186 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60923 states to 60923 states and 112434 transitions. [2022-07-14 15:52:49,186 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40257 [2022-07-14 15:52:49,208 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40257 [2022-07-14 15:52:49,209 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60923 states and 112434 transitions. [2022-07-14 15:52:49,223 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:49,223 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112434 transitions. [2022-07-14 15:52:49,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60923 states and 112434 transitions. [2022-07-14 15:52:49,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60923 to 60923. [2022-07-14 15:52:49,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60923 states, 60923 states have (on average 1.845509905946851) internal successors, (112434), 60922 states have internal predecessors, (112434), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:49,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60923 states to 60923 states and 112434 transitions. [2022-07-14 15:52:49,907 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60923 states and 112434 transitions. [2022-07-14 15:52:49,907 INFO L374 stractBuchiCegarLoop]: Abstraction has 60923 states and 112434 transitions. [2022-07-14 15:52:49,907 INFO L287 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-07-14 15:52:49,907 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60923 states and 112434 transitions. [2022-07-14 15:52:50,038 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:50,038 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:50,039 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:50,040 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:50,040 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:50,040 INFO L752 eck$LassoCheckResult]: Stem: 851845#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 851846#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 846480#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 846481#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 850521#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 850349#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 850350#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 851867#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 851520#L95 assume !(0 == getOrigin_~person#1); 848284#L99 assume !(1 == getOrigin_~person#1); 848285#L103 assume !(2 == getOrigin_~person#1); 852864#L107 assume !(3 == getOrigin_~person#1); 852044#L111 assume !(4 == getOrigin_~person#1); 851325#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 851089#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 851090#L653 assume !(0 == initPersonOnFloor_~floor#1); 851229#L680 assume !(1 == initPersonOnFloor_~floor#1); 850250#L707 assume !(2 == initPersonOnFloor_~floor#1); 849494#L734 assume !(3 == initPersonOnFloor_~floor#1); 847578#L761 assume !(4 == initPersonOnFloor_~floor#1); 847163#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 847383#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 846804#L457-2 assume { :end_inline_callOnFloor } true; 847112#L797 assume { :end_inline_initPersonOnFloor } true; 847113#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 847840#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 849536#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 852020#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 848274#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 848275#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 849043#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 852938#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 846569#L2261 assume !(0 != timeShift_~tmp___9~2#1); 846570#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 852708#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 852709#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 852682#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 852683#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 851142#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 851143#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 853682#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 853880#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 853881#L2021 assume !(1 == ~currentHeading~0); 856721#L2031 assume !(0 == ~currentFloorID~0); 856712#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 856303#L2037-1 assume { :end_inline_continueInDirection } true; 856299#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 856298#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 856295#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 855650#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 855781#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 855559#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 855562#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 855492#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 855487#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 855484#L3285-2 assume !false; 848776#L3286 [2022-07-14 15:52:50,040 INFO L754 eck$LassoCheckResult]: Loop: 848776#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 848777#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 851154#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 850090#L3293 assume 1 != cleanup_~tmp___0~12#1; 850091#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 849456#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 846917#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 846918#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 847497#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 847932#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 852570#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 853057#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 885493#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 885492#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 885101#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 852973#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 852490#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 850498#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 847284#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 850858#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 849257#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 849258#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 851751#L2263-2 assume !(0 != ~persons_0~0); 847378#L2263-3 assume !(0 != ~persons_1~0); 847157#L2277-1 assume !(0 != ~persons_2~0); 847048#L2291-1 assume !(0 != ~persons_3~0); 846723#L2305-1 assume !(0 != ~persons_4~0); 846929#L2319-1 assume !(0 != ~persons_5~0); 848161#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 848162#L473-12 assume 0 == isPersonOnFloor_~floor#1; 851584#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 846770#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 846540#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 846516#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 851593#L473-14 assume 0 == isPersonOnFloor_~floor#1; 851662#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 847066#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 851025#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 849369#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 849370#L473-16 assume 0 == isPersonOnFloor_~floor#1; 852505#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 846747#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 847218#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 848551#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 850364#L473-18 assume 0 == isPersonOnFloor_~floor#1; 851329#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 846430#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 851012#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 851295#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 851296#L473-20 assume 0 == isPersonOnFloor_~floor#1; 852166#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 846471#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 847972#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 850145#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 850146#L473-22 assume 0 == isPersonOnFloor_~floor#1; 851067#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 846436#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 849293#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 851818#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 848017#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 848018#L429-41 assume { :end_inline_resetCallOnFloor } true; 851625#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 848060#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 847720#L1355-5 assume { :end_inline_resetFloorButton } true; 852506#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 850688#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 849108#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 848635#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 849530#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 848714#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 848715#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 846635#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 851664#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 850952#L3285-2 assume !false; 848776#L3286 [2022-07-14 15:52:50,041 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:50,041 INFO L85 PathProgramCache]: Analyzing trace with hash -1949605155, now seen corresponding path program 1 times [2022-07-14 15:52:50,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:50,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [321485947] [2022-07-14 15:52:50,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:50,042 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:50,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:50,062 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:50,062 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:50,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [321485947] [2022-07-14 15:52:50,062 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [321485947] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:50,062 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:50,062 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:52:50,063 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765526498] [2022-07-14 15:52:50,063 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:50,063 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:50,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:50,063 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 5 times [2022-07-14 15:52:50,063 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:50,063 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1095671003] [2022-07-14 15:52:50,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:50,064 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:50,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:50,092 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:50,093 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:50,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1095671003] [2022-07-14 15:52:50,093 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1095671003] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:50,093 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:50,093 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:50,093 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1080737899] [2022-07-14 15:52:50,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:50,094 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:50,094 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:50,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:50,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:50,094 INFO L87 Difference]: Start difference. First operand 60923 states and 112434 transitions. cyclomatic complexity: 51534 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:50,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:50,542 INFO L93 Difference]: Finished difference Result 60902 states and 112400 transitions. [2022-07-14 15:52:50,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:52:50,543 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60902 states and 112400 transitions. [2022-07-14 15:52:50,758 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:50,917 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60902 states to 60902 states and 112400 transitions. [2022-07-14 15:52:50,917 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40236 [2022-07-14 15:52:50,947 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40236 [2022-07-14 15:52:50,947 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60902 states and 112400 transitions. [2022-07-14 15:52:50,949 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:50,949 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112400 transitions. [2022-07-14 15:52:50,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60902 states and 112400 transitions. [2022-07-14 15:52:51,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60902 to 60902. [2022-07-14 15:52:51,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60902 states, 60902 states have (on average 1.845587993826147) internal successors, (112400), 60901 states have internal predecessors, (112400), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:51,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60902 states to 60902 states and 112400 transitions. [2022-07-14 15:52:51,853 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112400 transitions. [2022-07-14 15:52:51,853 INFO L374 stractBuchiCegarLoop]: Abstraction has 60902 states and 112400 transitions. [2022-07-14 15:52:51,853 INFO L287 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-07-14 15:52:51,853 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60902 states and 112400 transitions. [2022-07-14 15:52:51,979 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:51,980 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:51,980 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:51,982 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:51,982 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:51,982 INFO L752 eck$LassoCheckResult]: Stem: 973724#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 973725#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 968320#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 968321#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 972368#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 972188#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 972189#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 973747#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 973387#L95 assume !(0 == getOrigin_~person#1); 970120#L99 assume !(1 == getOrigin_~person#1); 970121#L103 assume !(2 == getOrigin_~person#1); 974763#L107 assume !(3 == getOrigin_~person#1); 973932#L111 assume !(4 == getOrigin_~person#1); 973189#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 972958#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 972959#L653 assume !(0 == initPersonOnFloor_~floor#1); 973099#L680 assume 1 == initPersonOnFloor_~floor#1; 969695#L681 assume !(0 == initPersonOnFloor_~person#1); 969696#L684 assume !(1 == initPersonOnFloor_~person#1); 974168#L687 assume !(2 == initPersonOnFloor_~person#1); 972979#L690 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 972487#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 969221#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 968646#L457-2 assume { :end_inline_callOnFloor } true; 968953#L797 assume { :end_inline_initPersonOnFloor } true; 968954#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 969678#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 971372#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 975070#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 975048#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 975036#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 974842#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 974843#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 975578#L2261 assume !(0 != timeShift_~tmp___9~2#1); 975577#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 975576#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 975575#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 974548#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 974549#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 975183#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 975181#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 975180#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 975178#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 975179#L2021 assume !(1 == ~currentHeading~0); 977502#L2031 assume !(0 == ~currentFloorID~0); 977488#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 977482#L2037-1 assume { :end_inline_continueInDirection } true; 977478#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 977476#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 977470#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 977460#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 977463#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 977438#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 977441#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 977430#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 977428#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 977426#L3285-2 assume !false; 970615#L3286 [2022-07-14 15:52:51,983 INFO L754 eck$LassoCheckResult]: Loop: 970615#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 970616#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 973024#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 971932#L3293 assume 1 != cleanup_~tmp___0~12#1; 971933#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 971287#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 971288#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1028071#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1028062#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1028061#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1028060#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 998388#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 998387#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 998386#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 998384#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 974891#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 974355#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 972345#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 969127#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 972718#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 971094#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 971095#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 973632#L2263-2 assume !(0 != ~persons_0~0); 969216#L2263-3 assume !(0 != ~persons_1~0); 968998#L2277-1 assume !(0 != ~persons_2~0); 968888#L2291-1 assume !(0 != ~persons_3~0); 968564#L2305-1 assume !(0 != ~persons_4~0); 968771#L2319-1 assume !(0 != ~persons_5~0); 969997#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 969998#L473-12 assume 0 == isPersonOnFloor_~floor#1; 973451#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1028448#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1028446#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1028444#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1028443#L473-14 assume 0 == isPersonOnFloor_~floor#1; 973540#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 968908#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 972892#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 971206#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 970259#L473-16 assume 0 == isPersonOnFloor_~floor#1; 970260#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 968588#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 969057#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 970389#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 972206#L473-18 assume 0 == isPersonOnFloor_~floor#1; 973193#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 968270#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 972879#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 973158#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 973159#L473-20 assume 0 == isPersonOnFloor_~floor#1; 974053#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 968311#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 969807#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 971984#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 971985#L473-22 assume 0 == isPersonOnFloor_~floor#1; 972937#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 968276#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 971129#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 973698#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 969852#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 969853#L429-41 assume { :end_inline_resetCallOnFloor } true; 973503#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 969893#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 969557#L1355-5 assume { :end_inline_resetFloorButton } true; 974371#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 972546#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 970949#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 970481#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 971366#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 970552#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 970553#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 968473#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 973542#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 972813#L3285-2 assume !false; 970615#L3286 [2022-07-14 15:52:51,983 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:51,983 INFO L85 PathProgramCache]: Analyzing trace with hash -1542135587, now seen corresponding path program 1 times [2022-07-14 15:52:51,983 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:51,983 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1415111606] [2022-07-14 15:52:51,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:51,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:52,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:52,020 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:52,020 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:52,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1415111606] [2022-07-14 15:52:52,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1415111606] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:52,020 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:52,020 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:52:52,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2052080045] [2022-07-14 15:52:52,021 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:52,021 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:52,022 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:52,022 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 6 times [2022-07-14 15:52:52,022 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:52,022 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2063388817] [2022-07-14 15:52:52,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:52,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:52,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:52,056 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:52,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:52,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2063388817] [2022-07-14 15:52:52,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2063388817] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:52,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:52,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:52,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1836497303] [2022-07-14 15:52:52,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:52,058 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:52,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:52,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:52,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:52,058 INFO L87 Difference]: Start difference. First operand 60902 states and 112400 transitions. cyclomatic complexity: 51521 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:52,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:52,262 INFO L93 Difference]: Finished difference Result 60902 states and 112399 transitions. [2022-07-14 15:52:52,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:52:52,263 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60902 states and 112399 transitions. [2022-07-14 15:52:52,457 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:52,603 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60902 states to 60902 states and 112399 transitions. [2022-07-14 15:52:52,604 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40236 [2022-07-14 15:52:52,632 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40236 [2022-07-14 15:52:52,632 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60902 states and 112399 transitions. [2022-07-14 15:52:52,633 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:52,633 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112399 transitions. [2022-07-14 15:52:52,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60902 states and 112399 transitions. [2022-07-14 15:52:53,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60902 to 60902. [2022-07-14 15:52:53,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60902 states, 60902 states have (on average 1.8455715740041378) internal successors, (112399), 60901 states have internal predecessors, (112399), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:53,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60902 states to 60902 states and 112399 transitions. [2022-07-14 15:52:53,503 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112399 transitions. [2022-07-14 15:52:53,503 INFO L374 stractBuchiCegarLoop]: Abstraction has 60902 states and 112399 transitions. [2022-07-14 15:52:53,503 INFO L287 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-07-14 15:52:53,504 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60902 states and 112399 transitions. [2022-07-14 15:52:53,632 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:53,632 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:53,632 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:53,635 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:53,635 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:53,635 INFO L752 eck$LassoCheckResult]: Stem: 1095517#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1095518#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1090141#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1090142#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1094156#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1093980#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1093981#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1095538#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1095191#L95 assume !(0 == getOrigin_~person#1); 1091932#L99 assume !(1 == getOrigin_~person#1); 1091933#L103 assume !(2 == getOrigin_~person#1); 1096594#L107 assume !(3 == getOrigin_~person#1); 1095729#L111 assume !(4 == getOrigin_~person#1); 1094991#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1094756#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1094757#L653 assume !(0 == initPersonOnFloor_~floor#1); 1094900#L680 assume 1 == initPersonOnFloor_~floor#1; 1091508#L681 assume !(0 == initPersonOnFloor_~person#1); 1091509#L684 assume !(1 == initPersonOnFloor_~person#1); 1095985#L687 assume !(2 == initPersonOnFloor_~person#1); 1094781#L690 assume !(3 == initPersonOnFloor_~person#1); 1094782#L693 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1094270#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1091037#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1090464#L457-2 assume { :end_inline_callOnFloor } true; 1090768#L797 assume { :end_inline_initPersonOnFloor } true; 1090769#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1091491#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1093172#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1096895#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1096873#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1096861#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1096679#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1096680#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1097399#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1097398#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1097397#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1097396#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1096386#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1096387#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1097002#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1097000#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1096999#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1096997#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1096998#L2021 assume !(1 == ~currentHeading~0); 1099383#L2031 assume !(0 == ~currentFloorID~0); 1099373#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1099363#L2037-1 assume { :end_inline_continueInDirection } true; 1099359#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1099357#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1099354#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1099343#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1099345#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1099331#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1099334#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1099311#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1099309#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1099306#L3285-2 assume !false; 1099307#L3286 [2022-07-14 15:52:53,635 INFO L754 eck$LassoCheckResult]: Loop: 1099307#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1123861#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1123860#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1123859#L3293 assume 1 != cleanup_~tmp___0~12#1; 1123858#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1123826#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1123827#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1124880#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1124871#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1124870#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1124869#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1122199#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1119547#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1122198#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1122195#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1122196#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1124572#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1124477#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1124473#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1124446#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1124445#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1124439#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1124436#L2263-2 assume !(0 != ~persons_0~0); 1124394#L2263-3 assume !(0 != ~persons_1~0); 1124389#L2277-1 assume !(0 != ~persons_2~0); 1124368#L2291-1 assume !(0 != ~persons_3~0); 1124366#L2305-1 assume !(0 != ~persons_4~0); 1124330#L2319-1 assume !(0 != ~persons_5~0); 1124329#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1124328#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1124292#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1124278#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1124276#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1124274#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1124273#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1124220#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1124218#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1124216#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1124214#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1124213#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1124182#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1124160#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1124158#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1124156#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1124154#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1124060#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1124042#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1124034#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1124017#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1124016#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1124003#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1123971#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1123964#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1123961#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1123960#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1123931#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1123907#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1123904#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1123902#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1123901#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1123896#L429-41 assume { :end_inline_resetCallOnFloor } true; 1123895#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1123893#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1123889#L1355-5 assume { :end_inline_resetFloorButton } true; 1123888#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1123887#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1123886#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1123881#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1123879#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1123877#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1123868#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1123864#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1123863#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1123862#L3285-2 assume !false; 1099307#L3286 [2022-07-14 15:52:53,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:53,636 INFO L85 PathProgramCache]: Analyzing trace with hash 537794530, now seen corresponding path program 1 times [2022-07-14 15:52:53,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:53,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320449714] [2022-07-14 15:52:53,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:53,636 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:53,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:53,656 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:53,656 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:53,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [320449714] [2022-07-14 15:52:53,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [320449714] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:53,656 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:53,656 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:52:53,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [155867157] [2022-07-14 15:52:53,656 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:53,657 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:53,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:53,657 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 7 times [2022-07-14 15:52:53,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:53,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [425414029] [2022-07-14 15:52:53,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:53,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:53,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:53,684 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:53,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:53,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [425414029] [2022-07-14 15:52:53,685 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [425414029] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:53,685 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:53,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:53,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1957654323] [2022-07-14 15:52:53,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:53,685 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:53,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:53,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:53,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:53,686 INFO L87 Difference]: Start difference. First operand 60902 states and 112399 transitions. cyclomatic complexity: 51520 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:54,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:54,175 INFO L93 Difference]: Finished difference Result 60902 states and 112398 transitions. [2022-07-14 15:52:54,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:52:54,177 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60902 states and 112398 transitions. [2022-07-14 15:52:54,371 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:54,509 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60902 states to 60902 states and 112398 transitions. [2022-07-14 15:52:54,509 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40236 [2022-07-14 15:52:54,535 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40236 [2022-07-14 15:52:54,536 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60902 states and 112398 transitions. [2022-07-14 15:52:54,537 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:54,538 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112398 transitions. [2022-07-14 15:52:54,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60902 states and 112398 transitions. [2022-07-14 15:52:55,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60902 to 60902. [2022-07-14 15:52:55,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60902 states, 60902 states have (on average 1.8455551541821287) internal successors, (112398), 60901 states have internal predecessors, (112398), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:55,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60902 states to 60902 states and 112398 transitions. [2022-07-14 15:52:55,373 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112398 transitions. [2022-07-14 15:52:55,373 INFO L374 stractBuchiCegarLoop]: Abstraction has 60902 states and 112398 transitions. [2022-07-14 15:52:55,374 INFO L287 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-07-14 15:52:55,374 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60902 states and 112398 transitions. [2022-07-14 15:52:55,521 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:55,521 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:55,521 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:55,522 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:55,523 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:55,523 INFO L752 eck$LassoCheckResult]: Stem: 1217311#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1217312#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1211958#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1211959#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1215991#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1215816#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1215817#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1217333#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1216986#L95 assume !(0 == getOrigin_~person#1); 1213754#L99 assume !(1 == getOrigin_~person#1); 1213755#L103 assume !(2 == getOrigin_~person#1); 1218258#L107 assume !(3 == getOrigin_~person#1); 1217501#L111 assume !(4 == getOrigin_~person#1); 1216796#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1216565#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1216566#L653 assume !(0 == initPersonOnFloor_~floor#1); 1216704#L680 assume 1 == initPersonOnFloor_~floor#1; 1213330#L681 assume !(0 == initPersonOnFloor_~person#1); 1213331#L684 assume !(1 == initPersonOnFloor_~person#1); 1217715#L687 assume !(2 == initPersonOnFloor_~person#1); 1216587#L690 assume !(3 == initPersonOnFloor_~person#1); 1216588#L693 assume !(4 == initPersonOnFloor_~person#1); 1216106#L696 assume !(5 == initPersonOnFloor_~person#1); 1216107#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1212854#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1212282#L457-2 assume { :end_inline_callOnFloor } true; 1212584#L797 assume { :end_inline_initPersonOnFloor } true; 1212585#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1213313#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1215000#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1218538#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1218516#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1218504#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1218331#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1218332#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1219046#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1219045#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1219044#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1219043#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1218073#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1218074#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1218651#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1218649#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1218648#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1218646#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1218647#L2021 assume !(1 == ~currentHeading~0); 1221023#L2031 assume !(0 == ~currentFloorID~0); 1221013#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1221007#L2037-1 assume { :end_inline_continueInDirection } true; 1220999#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1220997#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1220994#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1220979#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1220985#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1220957#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1220960#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1220949#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1220947#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1220944#L3285-2 assume !false; 1220945#L3286 [2022-07-14 15:52:55,523 INFO L754 eck$LassoCheckResult]: Loop: 1220945#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1259977#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1259976#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1259975#L3293 assume 1 != cleanup_~tmp___0~12#1; 1259974#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1259973#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1259972#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1259896#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1259886#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1259885#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1247600#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1247599#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1232450#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1247598#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1247595#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1247596#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1247918#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1247912#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1247908#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1246558#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1246555#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1246552#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1246553#L2263-2 assume !(0 != ~persons_0~0); 1267826#L2263-3 assume !(0 != ~persons_1~0); 1267821#L2277-1 assume !(0 != ~persons_2~0); 1267800#L2291-1 assume !(0 != ~persons_3~0); 1267798#L2305-1 assume !(0 != ~persons_4~0); 1267762#L2319-1 assume !(0 != ~persons_5~0); 1267761#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1267760#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1267710#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1267696#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1267695#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1267693#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1267692#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1267659#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1265698#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1265654#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1265652#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1265651#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1260326#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1260304#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1260302#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1260294#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1260292#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1260261#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1260249#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1260247#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1260245#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1260243#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1260159#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1260127#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1260125#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1260123#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1260122#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1260046#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1260027#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1260025#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1260023#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1260022#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1260017#L429-41 assume { :end_inline_resetCallOnFloor } true; 1260016#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1260014#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1260010#L1355-5 assume { :end_inline_resetFloorButton } true; 1260008#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1260007#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1260006#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1260001#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1260009#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1259998#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1259989#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1259985#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1259984#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1259983#L3285-2 assume !false; 1220945#L3286 [2022-07-14 15:52:55,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:55,524 INFO L85 PathProgramCache]: Analyzing trace with hash -1395488252, now seen corresponding path program 1 times [2022-07-14 15:52:55,524 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:55,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1179304526] [2022-07-14 15:52:55,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:55,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:55,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:55,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:55,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:55,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1179304526] [2022-07-14 15:52:55,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1179304526] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:55,543 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:55,544 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:52:55,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [718300232] [2022-07-14 15:52:55,544 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:55,544 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:55,544 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:55,545 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 8 times [2022-07-14 15:52:55,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:55,545 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [33509748] [2022-07-14 15:52:55,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:55,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:55,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:55,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:55,573 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:55,573 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [33509748] [2022-07-14 15:52:55,573 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [33509748] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:55,573 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:55,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:55,574 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [761652727] [2022-07-14 15:52:55,574 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:55,574 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:55,574 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:55,574 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:52:55,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:52:55,575 INFO L87 Difference]: Start difference. First operand 60902 states and 112398 transitions. cyclomatic complexity: 51519 Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:55,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:55,772 INFO L93 Difference]: Finished difference Result 60902 states and 112397 transitions. [2022-07-14 15:52:55,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:52:55,773 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60902 states and 112397 transitions. [2022-07-14 15:52:55,997 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:56,499 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60902 states to 60902 states and 112397 transitions. [2022-07-14 15:52:56,500 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40236 [2022-07-14 15:52:56,524 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40236 [2022-07-14 15:52:56,525 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60902 states and 112397 transitions. [2022-07-14 15:52:56,539 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:56,540 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112397 transitions. [2022-07-14 15:52:56,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60902 states and 112397 transitions. [2022-07-14 15:52:56,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60902 to 60902. [2022-07-14 15:52:57,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60902 states, 60902 states have (on average 1.8455387343601195) internal successors, (112397), 60901 states have internal predecessors, (112397), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:57,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60902 states to 60902 states and 112397 transitions. [2022-07-14 15:52:57,115 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112397 transitions. [2022-07-14 15:52:57,115 INFO L374 stractBuchiCegarLoop]: Abstraction has 60902 states and 112397 transitions. [2022-07-14 15:52:57,115 INFO L287 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-07-14 15:52:57,115 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60902 states and 112397 transitions. [2022-07-14 15:52:57,250 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:57,250 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:57,250 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:57,252 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:57,252 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:57,252 INFO L752 eck$LassoCheckResult]: Stem: 1339121#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1339122#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1333775#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1333776#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1337779#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1337609#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1337610#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1339144#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1338795#L95 assume !(0 == getOrigin_~person#1); 1335576#L99 assume !(1 == getOrigin_~person#1); 1335577#L103 assume !(2 == getOrigin_~person#1); 1340071#L107 assume !(3 == getOrigin_~person#1); 1339311#L111 assume !(4 == getOrigin_~person#1); 1338601#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1338373#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1338374#L653 assume !(0 == initPersonOnFloor_~floor#1); 1338511#L680 assume 1 == initPersonOnFloor_~floor#1; 1335148#L681 assume !(0 == initPersonOnFloor_~person#1); 1335149#L684 assume !(1 == initPersonOnFloor_~person#1); 1339536#L687 assume !(2 == initPersonOnFloor_~person#1); 1338392#L690 assume !(3 == initPersonOnFloor_~person#1); 1338393#L693 assume !(4 == initPersonOnFloor_~person#1); 1337889#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1337890#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1334672#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1334098#L457-2 assume { :end_inline_callOnFloor } true; 1334404#L797 assume { :end_inline_initPersonOnFloor } true; 1334405#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1335131#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1336816#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1340362#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1340340#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1340328#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1340138#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1340139#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1340873#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1340872#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1340871#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1340870#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1339903#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1339904#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1340476#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1340474#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1340473#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1340471#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1340472#L2021 assume !(1 == ~currentHeading~0); 1342774#L2031 assume !(0 == ~currentFloorID~0); 1342764#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1342754#L2037-1 assume { :end_inline_continueInDirection } true; 1342750#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1342748#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1342745#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1342734#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1342736#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1342722#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1342725#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1342702#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1342700#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1342697#L3285-2 assume !false; 1342698#L3286 [2022-07-14 15:52:57,253 INFO L754 eck$LassoCheckResult]: Loop: 1342698#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1379478#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1379477#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1379476#L3293 assume 1 != cleanup_~tmp___0~12#1; 1379475#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1379466#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1379455#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1379447#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1379438#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1379437#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1379436#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1379435#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1361713#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1379434#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1379431#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1379432#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1380071#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1380063#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1380057#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1380052#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1380051#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1380044#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1380041#L2263-2 assume !(0 != ~persons_0~0); 1379993#L2263-3 assume !(0 != ~persons_1~0); 1379988#L2277-1 assume !(0 != ~persons_2~0); 1379967#L2291-1 assume !(0 != ~persons_3~0); 1379965#L2305-1 assume !(0 != ~persons_4~0); 1379929#L2319-1 assume !(0 != ~persons_5~0); 1379928#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1379927#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1379873#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1379859#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1379857#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1379855#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1379854#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1379749#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1379747#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1379745#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1379743#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1379742#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1379715#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1379693#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1379691#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1379689#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1379688#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1379663#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1379652#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1379650#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1379648#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1379647#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1379627#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1379595#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1379593#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1379591#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1379590#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1379548#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1379524#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1379521#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1379519#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1379518#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1379513#L429-41 assume { :end_inline_resetCallOnFloor } true; 1379512#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1379510#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1379506#L1355-5 assume { :end_inline_resetFloorButton } true; 1379505#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1379504#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1379503#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1379498#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1379496#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1379494#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1379485#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1379481#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1379480#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1379479#L3285-2 assume !false; 1342698#L3286 [2022-07-14 15:52:57,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:57,253 INFO L85 PathProgramCache]: Analyzing trace with hash -2055019774, now seen corresponding path program 1 times [2022-07-14 15:52:57,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:57,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184033865] [2022-07-14 15:52:57,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:57,254 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:57,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:57,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:57,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:57,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184033865] [2022-07-14 15:52:57,305 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184033865] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:57,305 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:57,305 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:52:57,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [44135123] [2022-07-14 15:52:57,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:57,306 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:57,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:57,306 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 9 times [2022-07-14 15:52:57,306 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:57,306 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [264669723] [2022-07-14 15:52:57,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:57,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:57,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:57,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:57,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:57,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [264669723] [2022-07-14 15:52:57,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [264669723] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:57,335 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:57,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:57,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [853317505] [2022-07-14 15:52:57,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:57,336 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:57,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:57,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:52:57,336 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:52:57,336 INFO L87 Difference]: Start difference. First operand 60902 states and 112397 transitions. cyclomatic complexity: 51518 Second operand has 7 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:57,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:52:57,899 INFO L93 Difference]: Finished difference Result 60902 states and 112396 transitions. [2022-07-14 15:52:57,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-14 15:52:57,900 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60902 states and 112396 transitions. [2022-07-14 15:52:58,100 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:58,259 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60902 states to 60902 states and 112396 transitions. [2022-07-14 15:52:58,259 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40236 [2022-07-14 15:52:58,288 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40236 [2022-07-14 15:52:58,289 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60902 states and 112396 transitions. [2022-07-14 15:52:58,300 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:52:58,300 INFO L369 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112396 transitions. [2022-07-14 15:52:58,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60902 states and 112396 transitions. [2022-07-14 15:52:59,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60902 to 60902. [2022-07-14 15:52:59,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60902 states, 60902 states have (on average 1.8455223145381103) internal successors, (112396), 60901 states have internal predecessors, (112396), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:52:59,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60902 states to 60902 states and 112396 transitions. [2022-07-14 15:52:59,232 INFO L392 hiAutomatonCegarLoop]: Abstraction has 60902 states and 112396 transitions. [2022-07-14 15:52:59,232 INFO L374 stractBuchiCegarLoop]: Abstraction has 60902 states and 112396 transitions. [2022-07-14 15:52:59,232 INFO L287 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-07-14 15:52:59,232 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60902 states and 112396 transitions. [2022-07-14 15:52:59,366 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 28475 [2022-07-14 15:52:59,367 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:52:59,367 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:52:59,368 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:59,368 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:52:59,368 INFO L752 eck$LassoCheckResult]: Stem: 1460936#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1460937#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1455604#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1455605#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1459617#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1459451#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1459452#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1460960#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1460607#L95 assume !(0 == getOrigin_~person#1); 1457402#L99 assume !(1 == getOrigin_~person#1); 1457403#L103 assume !(2 == getOrigin_~person#1); 1461924#L107 assume !(3 == getOrigin_~person#1); 1461127#L111 assume !(4 == getOrigin_~person#1); 1460411#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1460183#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1460184#L653 assume !(0 == initPersonOnFloor_~floor#1); 1460321#L680 assume 1 == initPersonOnFloor_~floor#1; 1456977#L681 assume !(0 == initPersonOnFloor_~person#1); 1456978#L684 assume !(1 == initPersonOnFloor_~person#1); 1461359#L687 assume !(2 == initPersonOnFloor_~person#1); 1460203#L690 assume !(3 == initPersonOnFloor_~person#1); 1460204#L693 assume !(4 == initPersonOnFloor_~person#1); 1459730#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1459731#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1456500#L445 assume !(0 == callOnFloor_~floorID#1); 1456501#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1455926#L457-2 assume { :end_inline_callOnFloor } true; 1456230#L797 assume { :end_inline_initPersonOnFloor } true; 1456231#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1456960#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1458643#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1462214#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1462192#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1462180#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1461998#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1461999#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1462723#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1462722#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1462721#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1462720#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1461751#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1461752#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1462328#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1462326#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1462325#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1462323#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1462324#L2021 assume !(1 == ~currentHeading~0); 1464658#L2031 assume !(0 == ~currentFloorID~0); 1464648#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1464638#L2037-1 assume { :end_inline_continueInDirection } true; 1464634#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1464632#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1464629#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1464618#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1464621#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1464606#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1464609#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1464586#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1464584#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1464581#L3285-2 assume !false; 1464582#L3286 [2022-07-14 15:52:59,369 INFO L754 eck$LassoCheckResult]: Loop: 1464582#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1507454#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1507453#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1507451#L3293 assume 1 != cleanup_~tmp___0~12#1; 1507452#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1507444#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1507437#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1507430#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1507423#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1507422#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1507421#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1507244#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1476328#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1507243#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1507241#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1507242#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1507256#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1507249#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1507246#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1507205#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1507204#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1507200#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1507201#L2263-2 assume !(0 != ~persons_0~0); 1509699#L2263-3 assume !(0 != ~persons_1~0); 1509694#L2277-1 assume !(0 != ~persons_2~0); 1509673#L2291-1 assume !(0 != ~persons_3~0); 1509671#L2305-1 assume !(0 != ~persons_4~0); 1509635#L2319-1 assume !(0 != ~persons_5~0); 1509634#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1509633#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1509538#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1509524#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1509522#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1509520#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1509519#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1509410#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1509408#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1509406#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1509404#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1509403#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1509314#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1509292#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1509290#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1509282#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1509280#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1509249#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1509237#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1509235#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1509233#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1509231#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1509156#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1509124#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1509122#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1509120#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1509119#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1509101#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1507517#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1507518#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1507511#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1507512#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1507503#L429-41 assume { :end_inline_resetCallOnFloor } true; 1507504#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1507499#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1507496#L1355-5 assume { :end_inline_resetFloorButton } true; 1507491#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1507492#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1507488#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1507481#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1507480#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1507478#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1507479#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1507611#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1507610#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1507609#L3285-2 assume !false; 1464582#L3286 [2022-07-14 15:52:59,369 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:59,369 INFO L85 PathProgramCache]: Analyzing trace with hash 668868151, now seen corresponding path program 1 times [2022-07-14 15:52:59,369 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:59,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2128434876] [2022-07-14 15:52:59,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:59,370 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:59,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:59,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:59,391 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:59,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2128434876] [2022-07-14 15:52:59,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2128434876] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:59,391 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:59,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:52:59,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716388819] [2022-07-14 15:52:59,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:59,392 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:52:59,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:52:59,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 10 times [2022-07-14 15:52:59,392 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:52:59,392 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [293187869] [2022-07-14 15:52:59,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:52:59,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:52:59,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:52:59,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:52:59,421 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:52:59,421 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [293187869] [2022-07-14 15:52:59,421 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [293187869] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:52:59,421 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:52:59,421 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:52:59,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1268844015] [2022-07-14 15:52:59,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:52:59,422 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:52:59,422 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:52:59,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:52:59,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:52:59,422 INFO L87 Difference]: Start difference. First operand 60902 states and 112396 transitions. cyclomatic complexity: 51517 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:53:00,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:53:00,631 INFO L93 Difference]: Finished difference Result 48496 states and 87932 transitions. [2022-07-14 15:53:00,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 15:53:00,632 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48496 states and 87932 transitions. [2022-07-14 15:53:00,800 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 22598 [2022-07-14 15:53:00,928 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48496 states to 48496 states and 87932 transitions. [2022-07-14 15:53:00,928 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33391 [2022-07-14 15:53:00,956 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33391 [2022-07-14 15:53:00,956 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48496 states and 87932 transitions. [2022-07-14 15:53:00,958 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:53:00,958 INFO L369 hiAutomatonCegarLoop]: Abstraction has 48496 states and 87932 transitions. [2022-07-14 15:53:00,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48496 states and 87932 transitions. [2022-07-14 15:53:01,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48496 to 28249. [2022-07-14 15:53:01,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28249 states, 28249 states have (on average 1.8039930617012991) internal successors, (50961), 28248 states have internal predecessors, (50961), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:53:01,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28249 states to 28249 states and 50961 transitions. [2022-07-14 15:53:01,793 INFO L392 hiAutomatonCegarLoop]: Abstraction has 28249 states and 50961 transitions. [2022-07-14 15:53:01,793 INFO L374 stractBuchiCegarLoop]: Abstraction has 28249 states and 50961 transitions. [2022-07-14 15:53:01,793 INFO L287 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-07-14 15:53:01,793 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28249 states and 50961 transitions. [2022-07-14 15:53:01,866 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12796 [2022-07-14 15:53:01,866 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:53:01,866 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:53:01,868 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:53:01,868 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:53:01,868 INFO L752 eck$LassoCheckResult]: Stem: 1570467#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1570468#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1565015#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1565016#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1569054#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1568885#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1568886#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1570491#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1570093#L95 assume !(0 == getOrigin_~person#1); 1566801#L99 assume !(1 == getOrigin_~person#1); 1566802#L103 assume !(2 == getOrigin_~person#1); 1571526#L107 assume !(3 == getOrigin_~person#1); 1570682#L111 assume !(4 == getOrigin_~person#1); 1569884#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1569654#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1569655#L653 assume !(0 == initPersonOnFloor_~floor#1); 1569793#L680 assume 1 == initPersonOnFloor_~floor#1; 1566368#L681 assume !(0 == initPersonOnFloor_~person#1); 1566369#L684 assume !(1 == initPersonOnFloor_~person#1); 1570924#L687 assume !(2 == initPersonOnFloor_~person#1); 1569678#L690 assume !(3 == initPersonOnFloor_~person#1); 1569679#L693 assume !(4 == initPersonOnFloor_~person#1); 1569173#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1569174#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1565898#L445 assume !(0 == callOnFloor_~floorID#1); 1565899#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1565332#L457-2 assume { :end_inline_callOnFloor } true; 1565637#L797 assume { :end_inline_initPersonOnFloor } true; 1565638#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1566355#L382 assume !(0 == isFloorCalling_~floorID#1); 1567040#L386 assume !(1 == isFloorCalling_~floorID#1); 1567041#L390 assume !(2 == isFloorCalling_~floorID#1); 1569252#L394 assume !(3 == isFloorCalling_~floorID#1); 1570460#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1570461#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1570657#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1566793#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1566794#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1567552#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1567520#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1565102#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1565103#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1571180#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1567263#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1567264#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1569574#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1565778#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1565779#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1568077#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1571012#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1569712#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1569445#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1569446#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1571964#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1571965#L2021 assume !(1 == ~currentHeading~0); 1571843#L2031 assume !(0 == ~currentFloorID~0); 1566690#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1573920#L2037-1 assume { :end_inline_continueInDirection } true; 1573916#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1573914#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1573906#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1573897#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1573896#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1573875#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1573878#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1573867#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1573865#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1573862#L3285-2 assume !false; 1573863#L3286 [2022-07-14 15:53:01,869 INFO L754 eck$LassoCheckResult]: Loop: 1573863#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1587874#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1587867#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1587866#L3293 assume 1 != cleanup_~tmp___0~12#1; 1587865#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1587864#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1587859#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1587858#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1566446#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1566447#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1571197#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1578548#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1578345#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1578341#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1578339#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1578337#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1578336#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1578335#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1578333#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1578332#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1578331#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1578328#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1578326#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1578327#L2263-2 assume !(0 != ~persons_0~0); 1588753#L2263-3 assume !(0 != ~persons_1~0); 1588748#L2277-1 assume !(0 != ~persons_2~0); 1588712#L2291-1 assume !(0 != ~persons_3~0); 1588710#L2305-1 assume !(0 != ~persons_4~0); 1588662#L2319-1 assume !(0 != ~persons_5~0); 1588661#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1588660#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1588639#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1588615#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1588611#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1588544#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1588537#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1588498#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1588490#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1588487#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1588480#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1588479#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1588401#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1588374#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1588371#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1588369#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1588361#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1588261#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1588124#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1588118#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1588042#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1588041#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1588035#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1587992#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1587979#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1587974#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1587972#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1587952#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1587933#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1587931#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1587929#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1587928#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1587923#L429-41 assume { :end_inline_resetCallOnFloor } true; 1587922#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1587920#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1587916#L1355-5 assume { :end_inline_resetFloorButton } true; 1587915#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1587914#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1587913#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1587904#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1587982#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1587899#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1587890#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1587884#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1587879#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1587877#L3285-2 assume !false; 1573863#L3286 [2022-07-14 15:53:01,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:53:01,869 INFO L85 PathProgramCache]: Analyzing trace with hash 1144164555, now seen corresponding path program 1 times [2022-07-14 15:53:01,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:53:01,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2018483100] [2022-07-14 15:53:01,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:53:01,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:53:01,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:53:01,902 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:53:01,902 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:53:01,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2018483100] [2022-07-14 15:53:01,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2018483100] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:53:01,903 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:53:01,903 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:53:01,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1222100063] [2022-07-14 15:53:01,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:53:01,903 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:53:01,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:53:01,904 INFO L85 PathProgramCache]: Analyzing trace with hash 371899072, now seen corresponding path program 1 times [2022-07-14 15:53:01,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:53:01,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796370468] [2022-07-14 15:53:01,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:53:01,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:53:01,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:53:01,917 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:53:01,918 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:53:01,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796370468] [2022-07-14 15:53:01,918 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796370468] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:53:01,918 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:53:01,918 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:53:01,918 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009353281] [2022-07-14 15:53:01,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:53:01,919 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:53:01,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:53:01,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:53:01,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:53:01,919 INFO L87 Difference]: Start difference. First operand 28249 states and 50961 transitions. cyclomatic complexity: 22722 Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:53:04,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:53:04,647 INFO L93 Difference]: Finished difference Result 177302 states and 324099 transitions. [2022-07-14 15:53:04,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-14 15:53:04,648 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 177302 states and 324099 transitions. [2022-07-14 15:53:05,564 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 66858 [2022-07-14 15:53:05,997 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 177302 states to 177302 states and 324099 transitions. [2022-07-14 15:53:05,997 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 122599 [2022-07-14 15:53:06,076 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 122599 [2022-07-14 15:53:06,077 INFO L73 IsDeterministic]: Start isDeterministic. Operand 177302 states and 324099 transitions. [2022-07-14 15:53:06,079 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:53:06,079 INFO L369 hiAutomatonCegarLoop]: Abstraction has 177302 states and 324099 transitions. [2022-07-14 15:53:06,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177302 states and 324099 transitions. [2022-07-14 15:53:07,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177302 to 56131. [2022-07-14 15:53:07,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56131 states, 56131 states have (on average 1.8045465072776183) internal successors, (101291), 56130 states have internal predecessors, (101291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:53:07,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56131 states to 56131 states and 101291 transitions. [2022-07-14 15:53:07,479 INFO L392 hiAutomatonCegarLoop]: Abstraction has 56131 states and 101291 transitions. [2022-07-14 15:53:07,479 INFO L374 stractBuchiCegarLoop]: Abstraction has 56131 states and 101291 transitions. [2022-07-14 15:53:07,479 INFO L287 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-07-14 15:53:07,479 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56131 states and 101291 transitions. [2022-07-14 15:53:07,605 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 25384 [2022-07-14 15:53:07,605 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:53:07,605 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:53:07,607 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:53:07,607 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:53:07,608 INFO L752 eck$LassoCheckResult]: Stem: 1776134#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1776135#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1770591#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1770592#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1774668#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1774488#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1774489#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1776159#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1775743#L95 assume !(0 == getOrigin_~person#1); 1772382#L99 assume !(1 == getOrigin_~person#1); 1772383#L103 assume !(2 == getOrigin_~person#1); 1777318#L107 assume !(3 == getOrigin_~person#1); 1776360#L111 assume !(4 == getOrigin_~person#1); 1775525#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1775290#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1775291#L653 assume !(0 == initPersonOnFloor_~floor#1); 1775431#L680 assume 1 == initPersonOnFloor_~floor#1; 1771941#L681 assume !(0 == initPersonOnFloor_~person#1); 1771942#L684 assume !(1 == initPersonOnFloor_~person#1); 1776618#L687 assume !(2 == initPersonOnFloor_~person#1); 1775313#L690 assume !(3 == initPersonOnFloor_~person#1); 1775314#L693 assume !(4 == initPersonOnFloor_~person#1); 1774788#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1774789#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1771468#L445 assume !(0 == callOnFloor_~floorID#1); 1771469#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1770907#L457-2 assume { :end_inline_callOnFloor } true; 1775294#L797 assume { :end_inline_initPersonOnFloor } true; 1771929#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1771930#L382 assume !(0 == isFloorCalling_~floorID#1); 1773648#L386 assume !(1 == isFloorCalling_~floorID#1); 1774871#L390 assume !(2 == isFloorCalling_~floorID#1); 1774872#L394 assume !(3 == isFloorCalling_~floorID#1); 1776125#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1776126#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1776340#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1772374#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1772375#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1772264#L1372-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1772265#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1775994#L1410-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1772181#L2094-1 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1778725#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1778723#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1778722#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1778721#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1778720#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1778719#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1778718#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1778717#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1778716#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1778715#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1778714#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1778712#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1775068#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1775069#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1783252#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1782071#L2021 assume !(1 == ~currentHeading~0); 1782072#L2031 assume !(0 == ~currentFloorID~0); 1774209#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1774210#L2037-1 assume { :end_inline_continueInDirection } true; 1783767#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1783766#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1783764#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1783758#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1783759#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1783749#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1783752#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1783742#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1783741#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1783739#L3285-2 assume !false; 1783740#L3286 [2022-07-14 15:53:07,608 INFO L754 eck$LassoCheckResult]: Loop: 1783740#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1796639#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1796640#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1796634#L3293 assume 1 != cleanup_~tmp___0~12#1; 1796632#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1796633#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1797042#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1797043#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1815724#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1815723#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1815711#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1796856#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1796857#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1796852#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1796853#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1796848#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1796849#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1796844#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1796845#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1796840#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1796841#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1796835#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1796833#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1796828#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1796829#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1796825#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1796827#L2263-2 assume !(0 != ~persons_0~0); 1816303#L2263-3 assume !(0 != ~persons_1~0); 1816298#L2277-1 assume !(0 != ~persons_2~0); 1816282#L2291-1 assume !(0 != ~persons_3~0); 1816279#L2305-1 assume !(0 != ~persons_4~0); 1816270#L2319-1 assume !(0 != ~persons_5~0); 1816269#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1816268#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1816245#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1816232#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1816230#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1816228#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1816227#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1816119#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1816117#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1816115#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1816113#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1816112#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1816021#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1815999#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1815997#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1815995#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1815994#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1815963#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1815921#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1815918#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1815913#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1815863#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1815851#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1815819#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1815817#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1815815#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1815814#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1797526#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1797506#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1797507#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1797500#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1797501#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1792579#L429-41 assume { :end_inline_resetCallOnFloor } true; 1797493#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1797177#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1797172#L1355-5 assume { :end_inline_resetFloorButton } true; 1797124#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1797125#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1797117#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1796693#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1797108#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1796667#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1796658#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1796645#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1796644#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1796643#L3285-2 assume !false; 1783740#L3286 [2022-07-14 15:53:07,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:53:07,612 INFO L85 PathProgramCache]: Analyzing trace with hash 1222667021, now seen corresponding path program 1 times [2022-07-14 15:53:07,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:53:07,613 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [586510647] [2022-07-14 15:53:07,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:53:07,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:53:07,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:53:07,643 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:53:07,644 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:53:07,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [586510647] [2022-07-14 15:53:07,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [586510647] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:53:07,644 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:53:07,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:53:07,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1268651613] [2022-07-14 15:53:07,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:53:07,645 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:53:07,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:53:07,645 INFO L85 PathProgramCache]: Analyzing trace with hash 1794998960, now seen corresponding path program 1 times [2022-07-14 15:53:07,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:53:07,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1457377943] [2022-07-14 15:53:07,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:53:07,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:53:07,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:53:07,662 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:53:07,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:53:07,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1457377943] [2022-07-14 15:53:07,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1457377943] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:53:07,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:53:07,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:53:07,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [45020231] [2022-07-14 15:53:07,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:53:07,663 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:53:07,668 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:53:07,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:53:07,668 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:53:07,669 INFO L87 Difference]: Start difference. First operand 56131 states and 101291 transitions. cyclomatic complexity: 45180 Second operand has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:53:10,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:53:10,623 INFO L93 Difference]: Finished difference Result 178092 states and 326723 transitions. [2022-07-14 15:53:10,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-14 15:53:10,624 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 178092 states and 326723 transitions.