./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec1_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec1_product19.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 329a2716e4212f7d84877599b73bf84d73c2c4b19cd8d5bf0b2cb6bd49bef38d --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 20:41:29,032 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 20:41:29,034 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 20:41:29,065 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 20:41:29,065 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 20:41:29,067 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 20:41:29,068 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 20:41:29,070 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 20:41:29,072 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 20:41:29,073 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 20:41:29,074 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 20:41:29,075 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 20:41:29,075 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 20:41:29,076 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 20:41:29,077 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 20:41:29,079 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 20:41:29,079 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 20:41:29,080 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 20:41:29,082 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 20:41:29,084 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 20:41:29,086 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 20:41:29,087 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 20:41:29,088 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 20:41:29,089 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 20:41:29,092 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 20:41:29,093 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 20:41:29,093 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 20:41:29,094 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 20:41:29,094 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 20:41:29,095 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 20:41:29,095 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 20:41:29,096 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 20:41:29,097 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 20:41:29,097 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 20:41:29,098 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 20:41:29,098 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 20:41:29,099 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 20:41:29,099 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 20:41:29,099 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 20:41:29,100 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 20:41:29,101 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 20:41:29,101 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-06 20:41:29,121 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 20:41:29,121 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 20:41:29,121 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 20:41:29,122 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 20:41:29,122 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 20:41:29,123 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 20:41:29,123 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 20:41:29,123 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-06 20:41:29,123 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-06 20:41:29,123 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-06 20:41:29,123 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-06 20:41:29,123 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-06 20:41:29,124 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-06 20:41:29,124 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 20:41:29,124 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 20:41:29,124 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-06 20:41:29,124 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 20:41:29,124 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 20:41:29,124 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 20:41:29,125 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-06 20:41:29,126 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 20:41:29,126 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 20:41:29,126 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 20:41:29,126 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 20:41:29,126 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 20:41:29,127 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-06 20:41:29,127 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 329a2716e4212f7d84877599b73bf84d73c2c4b19cd8d5bf0b2cb6bd49bef38d [2021-12-06 20:41:29,296 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 20:41:29,311 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 20:41:29,312 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 20:41:29,313 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 20:41:29,314 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 20:41:29,315 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/elevator_spec1_product19.cil.c [2021-12-06 20:41:29,359 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/data/e69cbbcc2/d513ddf010504c07a6cc282f5e1db3d3/FLAGebb21cdec [2021-12-06 20:41:29,807 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 20:41:29,807 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/sv-benchmarks/c/product-lines/elevator_spec1_product19.cil.c [2021-12-06 20:41:29,825 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/data/e69cbbcc2/d513ddf010504c07a6cc282f5e1db3d3/FLAGebb21cdec [2021-12-06 20:41:30,341 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/data/e69cbbcc2/d513ddf010504c07a6cc282f5e1db3d3 [2021-12-06 20:41:30,343 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 20:41:30,344 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 20:41:30,346 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 20:41:30,346 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 20:41:30,349 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 20:41:30,349 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:30,350 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@106ef1d6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30, skipping insertion in model container [2021-12-06 20:41:30,350 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:30,362 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 20:41:30,409 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 20:41:30,667 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/sv-benchmarks/c/product-lines/elevator_spec1_product19.cil.c[61467,61480] [2021-12-06 20:41:30,697 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 20:41:30,705 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 20:41:30,809 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/sv-benchmarks/c/product-lines/elevator_spec1_product19.cil.c[61467,61480] [2021-12-06 20:41:30,829 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 20:41:30,854 INFO L208 MainTranslator]: Completed translation [2021-12-06 20:41:30,854 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30 WrapperNode [2021-12-06 20:41:30,854 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 20:41:30,856 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 20:41:30,856 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 20:41:30,856 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 20:41:30,863 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:30,896 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,006 INFO L137 Inliner]: procedures = 94, calls = 341, calls flagged for inlining = 194, calls inlined = 300, statements flattened = 9025 [2021-12-06 20:41:31,007 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 20:41:31,007 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 20:41:31,007 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 20:41:31,007 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 20:41:31,014 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,014 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,038 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,038 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,096 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,144 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,158 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,175 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 20:41:31,176 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 20:41:31,176 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 20:41:31,176 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 20:41:31,177 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (1/1) ... [2021-12-06 20:41:31,184 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:31,191 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:31,201 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:31,203 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-06 20:41:31,237 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 20:41:31,238 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 20:41:31,238 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 20:41:31,238 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 20:41:31,338 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 20:41:31,339 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 20:41:33,530 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 20:41:33,557 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 20:41:33,557 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-06 20:41:33,561 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:41:33 BoogieIcfgContainer [2021-12-06 20:41:33,561 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 20:41:33,562 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-06 20:41:33,562 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-06 20:41:33,564 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-06 20:41:33,565 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 20:41:33,565 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 06.12 08:41:30" (1/3) ... [2021-12-06 20:41:33,565 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3ee4f341 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.12 08:41:33, skipping insertion in model container [2021-12-06 20:41:33,565 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 20:41:33,565 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:41:30" (2/3) ... [2021-12-06 20:41:33,566 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3ee4f341 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.12 08:41:33, skipping insertion in model container [2021-12-06 20:41:33,566 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 20:41:33,566 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:41:33" (3/3) ... [2021-12-06 20:41:33,567 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product19.cil.c [2021-12-06 20:41:33,597 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-06 20:41:33,597 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-06 20:41:33,597 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-06 20:41:33,597 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-06 20:41:33,597 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-06 20:41:33,597 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-06 20:41:33,597 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-06 20:41:33,597 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-06 20:41:33,642 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2554 states, 2553 states have (on average 1.8617312965139052) internal successors, (4753), 2553 states have internal predecessors, (4753), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:33,708 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1229 [2021-12-06 20:41:33,708 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:33,708 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:33,721 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:33,721 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:33,721 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-06 20:41:33,727 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2554 states, 2553 states have (on average 1.8617312965139052) internal successors, (4753), 2553 states have internal predecessors, (4753), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:33,749 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1229 [2021-12-06 20:41:33,749 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:33,750 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:33,753 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:33,754 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:33,759 INFO L791 eck$LassoCheckResult]: Stem: 639#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2432#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 966#L1242true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2443#L1235true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 345#L1250true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1176#L1206true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2528#L1176true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2203#L1275true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 838#L111true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1603#L136true bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 850#L551true assume 0 == initPersonOnFloor_~floor#1; 865#L552true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2240#L659-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 565#L1282true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 214#L1294-2true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1860#L343true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 423#L355-2true assume { :end_inline_callOnFloor } true; 1129#L695true assume { :end_inline_initPersonOnFloor } true; 2127#L976true assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2049#L111-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 230#L136-1true angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 994#L551-1true assume 0 == initPersonOnFloor_~floor#1; 1662#L552-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2036#L659-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 174#L1282-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1906#L1294-5true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1979#L343-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1370#L355-5true assume { :end_inline_callOnFloor } true; 1258#L695-1true assume { :end_inline_initPersonOnFloor } true; 1881#L943true assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2351#L275true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 272#L302true isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 246#L2952true stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1295#L2337true assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2316#L1668true stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2384#L2341true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2169#L2354true timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 857#L2489true assume !(0 != timeShift_~tmp___9~2#1); 328#L2580true assume !(1 == ~doorState~0); 1599#L2580-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 120#L275-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1762#L302-3true isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 557#L2952-1true stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 2398#L2220true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 113#L1668-1true stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 1238#L2233true timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 1155#L2588true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1502#L2277true assume !(1 == ~currentHeading~0); 1996#L2287true assume !(0 == ~currentFloorID~0); 1982#L2287-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2388#L2293-1true assume { :end_inline_continueInDirection } true; 104#L2597-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 525#L1668-3true __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2248#L1320true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1774#L1321true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2343#L1677true __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1282#L1325true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2322#L1380true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1571#L2612true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 89#L1006-2true [2021-12-06 20:41:33,760 INFO L793 eck$LassoCheckResult]: Loop: 89#L1006-2true assume !false; 2311#L1007true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1303#L1010true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 543#L1515true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 806#L1014true assume 1 != cleanup_~tmp___0~0#1; 1509#L1014-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 47#L275-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 551#L302-25true anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 265#L1776true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 616#L1840true isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2166#L1853true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1216#L1026true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2461#L275-30true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 872#L302-30true isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 505#L2952-3true stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 637#L2337-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2409#L1668-4true stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 1425#L2341-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1515#L2354-1true timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 601#L2489-2true assume !(0 != timeShift_~tmp___9~2#1); 1966#L2580-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1764#L2580-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2348#L275-33true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 604#L302-33true isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 308#L2952-4true stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 309#L2220-2true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1154#L1668-5true stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 484#L2233-2true timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 50#L2588-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 852#L2277-3true assume !(1 == ~currentHeading~0); 1217#L2287-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1626#L2287-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1159#L2293-7true assume { :end_inline_continueInDirection } true; 1199#L2597-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2556#L1668-7true __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1472#L1320-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2125#L1321-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 149#L1677-5true __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 416#L1325-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 418#L1380-1true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1530#L2612-1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 89#L1006-2true [2021-12-06 20:41:33,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:33,765 INFO L85 PathProgramCache]: Analyzing trace with hash -44110297, now seen corresponding path program 1 times [2021-12-06 20:41:33,771 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:33,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [671543409] [2021-12-06 20:41:33,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:33,773 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:33,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:33,966 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:33,967 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:33,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [671543409] [2021-12-06 20:41:33,968 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [671543409] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:33,968 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:33,968 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:41:33,969 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [587285639] [2021-12-06 20:41:33,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:33,973 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:33,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:33,974 INFO L85 PathProgramCache]: Analyzing trace with hash 516098898, now seen corresponding path program 1 times [2021-12-06 20:41:33,974 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:33,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734408851] [2021-12-06 20:41:33,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:33,974 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:33,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:34,048 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:34,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:34,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734408851] [2021-12-06 20:41:34,049 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734408851] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:34,049 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:34,050 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:41:34,050 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472211894] [2021-12-06 20:41:34,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:34,051 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:34,052 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:34,083 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 20:41:34,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:41:34,091 INFO L87 Difference]: Start difference. First operand has 2554 states, 2553 states have (on average 1.8617312965139052) internal successors, (4753), 2553 states have internal predecessors, (4753), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:36,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:36,537 INFO L93 Difference]: Finished difference Result 18931 states and 34996 transitions. [2021-12-06 20:41:36,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 20:41:36,543 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18931 states and 34996 transitions. [2021-12-06 20:41:36,712 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9040 [2021-12-06 20:41:36,843 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18931 states to 18751 states and 34800 transitions. [2021-12-06 20:41:36,844 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18751 [2021-12-06 20:41:36,866 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18751 [2021-12-06 20:41:36,867 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18751 states and 34800 transitions. [2021-12-06 20:41:36,896 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-06 20:41:36,897 INFO L681 BuchiCegarLoop]: Abstraction has 18751 states and 34800 transitions. [2021-12-06 20:41:36,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18751 states and 34800 transitions. [2021-12-06 20:41:37,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18751 to 7153. [2021-12-06 20:41:37,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7153 states, 7153 states have (on average 1.8581014958758564) internal successors, (13291), 7152 states have internal predecessors, (13291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:37,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7153 states to 7153 states and 13291 transitions. [2021-12-06 20:41:37,123 INFO L704 BuchiCegarLoop]: Abstraction has 7153 states and 13291 transitions. [2021-12-06 20:41:37,123 INFO L587 BuchiCegarLoop]: Abstraction has 7153 states and 13291 transitions. [2021-12-06 20:41:37,123 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-06 20:41:37,123 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7153 states and 13291 transitions. [2021-12-06 20:41:37,140 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3596 [2021-12-06 20:41:37,140 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:37,140 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:37,143 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:37,143 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:37,143 INFO L791 eck$LassoCheckResult]: Stem: 22758#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 22759#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 23215#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 23216#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 22257#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 22258#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 23436#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 24122#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 23059#L111 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 21691#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23075#L551 assume 0 == initPersonOnFloor_~floor#1; 23076#L552 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 21660#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 22634#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 22010#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 22011#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22401#L355-2 assume { :end_inline_callOnFloor } true; 22402#L695 assume { :end_inline_initPersonOnFloor } true; 23389#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 24066#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 21999#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 22046#L551-1 assume 0 == initPersonOnFloor_~floor#1; 23249#L552-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 21581#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 21921#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 21922#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 23999#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 21621#L355-5 assume { :end_inline_callOnFloor } true; 23517#L695-1 assume { :end_inline_initPersonOnFloor } true; 23518#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 23983#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 24162#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 24261#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 24260#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 24236#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 24169#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 24170#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 27536#L2489 assume !(0 != timeShift_~tmp___9~2#1); 27537#L2580 assume !(1 == ~doorState~0); 28470#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 28469#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 28468#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 28467#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 28465#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 28466#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 28519#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 28517#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 28516#L2277 assume !(1 == ~currentHeading~0); 24044#L2287 assume !(0 == ~currentFloorID~0); 23052#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 24039#L2293-1 assume { :end_inline_continueInDirection } true; 21771#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 21772#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 22567#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 23920#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 23921#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 23541#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 21847#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 24160#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 26806#L1006-2 [2021-12-06 20:41:37,143 INFO L793 eck$LassoCheckResult]: Loop: 26806#L1006-2 assume !false; 26805#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 26804#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 26803#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 26802#L1014 assume 1 != cleanup_~tmp___0~0#1; 26801#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 21644#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 21645#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 22113#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 21987#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 26750#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 24324#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 24323#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 24193#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 24310#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 24301#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 24300#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 24299#L2341-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 23425#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 22692#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 22693#L2580-3 assume 1 == ~doorState~0;~doorState~0 := 0; 28643#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 28642#L275-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 28641#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 28640#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 28638#L2220-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 23417#L1668-5 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 22503#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 22504#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 23079#L2277-3 assume !(1 == ~currentHeading~0); 23080#L2287-9 assume !(0 == ~currentFloorID~0); 22618#L2287-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 23422#L2293-7 assume { :end_inline_continueInDirection } true; 22495#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 27668#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 27666#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 27664#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 27663#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 27660#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 27651#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 26807#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 26806#L1006-2 [2021-12-06 20:41:37,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:37,144 INFO L85 PathProgramCache]: Analyzing trace with hash -44110297, now seen corresponding path program 2 times [2021-12-06 20:41:37,144 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:37,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650907206] [2021-12-06 20:41:37,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:37,145 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:37,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:37,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:37,206 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:37,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650907206] [2021-12-06 20:41:37,206 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650907206] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:37,206 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:37,206 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:41:37,206 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1262601190] [2021-12-06 20:41:37,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:37,207 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:37,207 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:37,207 INFO L85 PathProgramCache]: Analyzing trace with hash 1217163476, now seen corresponding path program 1 times [2021-12-06 20:41:37,207 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:37,208 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [124947589] [2021-12-06 20:41:37,208 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:37,208 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:37,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:37,234 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:37,234 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:37,234 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [124947589] [2021-12-06 20:41:37,234 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [124947589] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:37,234 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:37,234 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:41:37,234 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [776714204] [2021-12-06 20:41:37,235 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:37,235 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:37,235 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:37,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 20:41:37,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:41:37,236 INFO L87 Difference]: Start difference. First operand 7153 states and 13291 transitions. cyclomatic complexity: 6140 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:37,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:37,381 INFO L93 Difference]: Finished difference Result 10781 states and 19991 transitions. [2021-12-06 20:41:37,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 20:41:37,382 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10781 states and 19991 transitions. [2021-12-06 20:41:37,431 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7164 [2021-12-06 20:41:37,507 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10781 states to 10781 states and 19991 transitions. [2021-12-06 20:41:37,507 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10781 [2021-12-06 20:41:37,514 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10781 [2021-12-06 20:41:37,514 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10781 states and 19991 transitions. [2021-12-06 20:41:37,533 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-06 20:41:37,533 INFO L681 BuchiCegarLoop]: Abstraction has 10781 states and 19991 transitions. [2021-12-06 20:41:37,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10781 states and 19991 transitions. [2021-12-06 20:41:37,674 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10781 to 10773. [2021-12-06 20:41:37,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10773 states, 10773 states have (on average 1.8545437668244686) internal successors, (19979), 10772 states have internal predecessors, (19979), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:37,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10773 states to 10773 states and 19979 transitions. [2021-12-06 20:41:37,714 INFO L704 BuchiCegarLoop]: Abstraction has 10773 states and 19979 transitions. [2021-12-06 20:41:37,714 INFO L587 BuchiCegarLoop]: Abstraction has 10773 states and 19979 transitions. [2021-12-06 20:41:37,714 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-06 20:41:37,714 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10773 states and 19979 transitions. [2021-12-06 20:41:37,745 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7156 [2021-12-06 20:41:37,745 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:37,745 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:37,748 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:37,749 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:37,749 INFO L791 eck$LassoCheckResult]: Stem: 40705#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 40706#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 41166#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 41167#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 40204#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 40205#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 41387#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 42086#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 41007#L111 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 39632#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 41023#L551 assume 0 == initPersonOnFloor_~floor#1; 41024#L552 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39601#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 40581#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 39953#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 39954#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 40348#L355-2 assume { :end_inline_callOnFloor } true; 40349#L695 assume { :end_inline_initPersonOnFloor } true; 41342#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 42023#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 39942#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 39989#L551-1 assume 0 == initPersonOnFloor_~floor#1; 41201#L552-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39522#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 39864#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 39865#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 41958#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 39562#L355-5 assume { :end_inline_callOnFloor } true; 41470#L695-1 assume { :end_inline_initPersonOnFloor } true; 41471#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 41941#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 40072#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 40022#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 40023#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 41511#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 42122#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 42078#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 41035#L2489 assume !(0 != timeShift_~tmp___9~2#1); 40171#L2580 assume !(1 == ~doorState~0); 40172#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 39748#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 39749#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 41868#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 42136#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 39733#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 39734#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 41368#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 41370#L2277 assume !(1 == ~currentHeading~0); 41683#L2287 assume !(0 == ~currentFloorID~0); 40999#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42003#L2293-1 assume { :end_inline_continueInDirection } true; 46720#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 46719#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 46718#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 46716#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 46717#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 46699#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 46698#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 46132#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 46131#L1006-2 [2021-12-06 20:41:37,749 INFO L793 eck$LassoCheckResult]: Loop: 46131#L1006-2 assume !false; 46130#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 46129#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 46128#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 46127#L1014 assume 1 != cleanup_~tmp___0~0#1; 46126#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 46121#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 46119#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 46103#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 46094#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 46093#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 46092#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 46091#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 44064#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 46090#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 46088#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 46089#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 49249#L2341-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 41376#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 40639#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 40640#L2580-3 assume 1 == ~doorState~0;~doorState~0 := 0; 41994#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 47057#L275-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 47055#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 47051#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 47048#L2220-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 45599#L1668-5 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 45596#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 45593#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 41027#L2277-3 assume !(1 == ~currentHeading~0); 41028#L2287-9 assume !(0 == ~currentFloorID~0); 40563#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41372#L2293-7 assume { :end_inline_continueInDirection } true; 40440#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 46156#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 46154#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 46152#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 46151#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 46148#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 46135#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 46133#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 46131#L1006-2 [2021-12-06 20:41:37,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:37,750 INFO L85 PathProgramCache]: Analyzing trace with hash -437137307, now seen corresponding path program 1 times [2021-12-06 20:41:37,750 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:37,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [591349908] [2021-12-06 20:41:37,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:37,751 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:37,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:37,791 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:37,791 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:37,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [591349908] [2021-12-06 20:41:37,791 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [591349908] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:37,792 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:37,792 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:41:37,792 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [16229180] [2021-12-06 20:41:37,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:37,792 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:37,793 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:37,793 INFO L85 PathProgramCache]: Analyzing trace with hash 824136466, now seen corresponding path program 1 times [2021-12-06 20:41:37,793 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:37,793 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [932535323] [2021-12-06 20:41:37,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:37,793 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:37,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:37,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:37,830 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:37,830 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [932535323] [2021-12-06 20:41:37,830 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [932535323] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:37,830 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:37,830 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:41:37,830 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2110824392] [2021-12-06 20:41:37,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:37,831 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:37,831 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:37,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:41:37,831 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:41:37,832 INFO L87 Difference]: Start difference. First operand 10773 states and 19979 transitions. cyclomatic complexity: 9208 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:38,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:38,141 INFO L93 Difference]: Finished difference Result 38810 states and 71649 transitions. [2021-12-06 20:41:38,141 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 20:41:38,142 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38810 states and 71649 transitions. [2021-12-06 20:41:38,281 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 34062 [2021-12-06 20:41:38,395 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38810 states to 38810 states and 71649 transitions. [2021-12-06 20:41:38,395 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38810 [2021-12-06 20:41:38,422 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38810 [2021-12-06 20:41:38,422 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38810 states and 71649 transitions. [2021-12-06 20:41:38,445 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-06 20:41:38,445 INFO L681 BuchiCegarLoop]: Abstraction has 38810 states and 71649 transitions. [2021-12-06 20:41:38,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38810 states and 71649 transitions. [2021-12-06 20:41:38,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38810 to 13778. [2021-12-06 20:41:38,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13778 states, 13778 states have (on average 1.8412686892146901) internal successors, (25369), 13777 states have internal predecessors, (25369), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:38,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13778 states to 13778 states and 25369 transitions. [2021-12-06 20:41:38,719 INFO L704 BuchiCegarLoop]: Abstraction has 13778 states and 25369 transitions. [2021-12-06 20:41:38,719 INFO L587 BuchiCegarLoop]: Abstraction has 13778 states and 25369 transitions. [2021-12-06 20:41:38,720 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-06 20:41:38,720 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13778 states and 25369 transitions. [2021-12-06 20:41:38,748 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9224 [2021-12-06 20:41:38,748 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:38,748 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:38,751 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:38,751 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:38,751 INFO L791 eck$LassoCheckResult]: Stem: 90327#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 90328#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 90814#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 90815#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 89810#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 89811#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 91053#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 91850#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 90646#L111 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 89235#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 90662#L551 assume 0 == initPersonOnFloor_~floor#1; 90663#L552 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 89204#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 90201#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 89557#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 89558#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 89960#L355-2 assume { :end_inline_callOnFloor } true; 89961#L695 assume { :end_inline_initPersonOnFloor } true; 91001#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 91774#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 89546#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 89594#L551-1 assume 0 == initPersonOnFloor_~floor#1; 90851#L552-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 89124#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 89467#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 89468#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 91687#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 89164#L355-5 assume { :end_inline_callOnFloor } true; 91143#L695-1 assume { :end_inline_initPersonOnFloor } true; 91144#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 91666#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 89676#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 89625#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 89626#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 91182#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 91896#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 91837#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 91838#L2489 assume !(0 != timeShift_~tmp___9~2#1); 89776#L2580 assume !(1 == ~doorState~0); 89778#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 89350#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 89351#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 90187#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 90188#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 89335#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 89336#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 91033#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 91035#L2277 assume !(1 == ~currentHeading~0); 91746#L2287 assume !(0 == ~currentFloorID~0); 90638#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 93933#L2293-1 assume { :end_inline_continueInDirection } true; 89317#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 89318#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 91867#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 91868#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 91901#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 91902#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 99901#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 99899#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 99896#L1006-2 [2021-12-06 20:41:38,751 INFO L793 eck$LassoCheckResult]: Loop: 99896#L1006-2 assume !false; 99893#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 99891#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 99889#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 99887#L1014 assume 1 != cleanup_~tmp___0~0#1; 99881#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99814#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 99812#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 99806#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 99758#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 99756#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 99754#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99753#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 94523#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 99743#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 99736#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 99731#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 99726#L2341-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 99724#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 99721#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 99718#L2580-3 assume !(1 == ~doorState~0); 99719#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 101261#L275-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 101255#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 101253#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 101216#L2220-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 101211#L1668-5 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 101167#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 101161#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 90666#L2277-3 assume !(1 == ~currentHeading~0); 90667#L2287-9 assume !(0 == ~currentFloorID~0); 90183#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 91472#L2293-7 assume { :end_inline_continueInDirection } true; 91076#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 91077#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 91342#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 91343#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 89408#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 89409#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 99917#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 99900#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 99896#L1006-2 [2021-12-06 20:41:38,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:38,752 INFO L85 PathProgramCache]: Analyzing trace with hash -437137307, now seen corresponding path program 2 times [2021-12-06 20:41:38,752 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:38,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [613711488] [2021-12-06 20:41:38,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:38,780 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:38,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:38,818 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:38,819 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:38,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [613711488] [2021-12-06 20:41:38,819 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [613711488] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:38,819 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:38,819 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:41:38,819 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [107685015] [2021-12-06 20:41:38,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:38,820 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:38,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:38,820 INFO L85 PathProgramCache]: Analyzing trace with hash 1246838292, now seen corresponding path program 1 times [2021-12-06 20:41:38,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:38,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [206361476] [2021-12-06 20:41:38,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:38,821 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:38,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:41:38,836 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:41:38,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:41:38,879 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:41:39,678 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 20:41:39,678 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 20:41:39,678 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 20:41:39,678 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 20:41:39,678 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-06 20:41:39,678 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:39,678 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 20:41:39,678 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 20:41:39,679 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec1_product19.cil.c_Iteration4_Loop [2021-12-06 20:41:39,679 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 20:41:39,679 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 20:41:39,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,737 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,743 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:39,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,160 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 20:41:40,161 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-06 20:41:40,162 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,162 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,163 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,164 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-06 20:41:40,165 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,165 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,176 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,177 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret44#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret44#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,196 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:40,197 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,197 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,197 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,198 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-06 20:41:40,198 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,199 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,207 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,207 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret28#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret28#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,225 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-12-06 20:41:40,225 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,225 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,226 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,226 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-06 20:41:40,227 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,227 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,247 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,247 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-3, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~18#1=-3, ~calls_0~0=-3, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~25#1=-3, ULTIMATE.start_isFloorCalling_#res#1=-3, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-3, ULTIMATE.start_anyStopRequested_~tmp___3~1#1=-3, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-3} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-3, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~18#1=-3, ~calls_0~0=-3, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~25#1=-3, ULTIMATE.start_isFloorCalling_#res#1=-3, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-3, ULTIMATE.start_anyStopRequested_~tmp___3~1#1=-3, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-3} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,266 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2021-12-06 20:41:40,267 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,267 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,267 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,268 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-06 20:41:40,269 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,269 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,277 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,277 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,305 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2021-12-06 20:41:40,306 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,306 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,307 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,307 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-06 20:41:40,308 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,308 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,321 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,321 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~retValue_acc~17#1=0, ULTIMATE.start_cleanup_~tmp~6#1=0, ULTIMATE.start_isIdle_#res#1=0} Honda state: {ULTIMATE.start_isIdle_~retValue_acc~17#1=0, ULTIMATE.start_cleanup_~tmp~6#1=0, ULTIMATE.start_isIdle_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,340 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2021-12-06 20:41:40,340 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,341 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,341 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,342 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-12-06 20:41:40,342 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,342 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,350 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,351 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,369 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2021-12-06 20:41:40,369 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,369 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,370 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,371 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-12-06 20:41:40,371 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,371 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,380 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,380 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~22#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~22#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,398 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2021-12-06 20:41:40,398 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,398 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,399 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,400 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-12-06 20:41:40,401 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,401 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,409 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,409 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret29#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret29#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,427 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2021-12-06 20:41:40,427 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,427 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,428 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,429 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-12-06 20:41:40,429 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,429 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,437 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,437 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,455 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:40,455 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,455 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,456 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,457 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-12-06 20:41:40,457 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,457 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,465 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,466 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret47#1=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,483 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2021-12-06 20:41:40,484 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,484 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,484 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,485 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-12-06 20:41:40,486 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,486 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,494 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,494 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification1_spec__3_#t~ret23#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification1_spec__3_#t~ret23#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,512 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2021-12-06 20:41:40,512 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,513 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,513 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,514 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-12-06 20:41:40,514 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,514 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,527 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,527 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,545 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2021-12-06 20:41:40,545 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,546 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,546 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,547 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-12-06 20:41:40,547 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,547 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,563 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,564 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,582 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:40,582 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,582 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,583 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,583 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-12-06 20:41:40,584 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,584 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,592 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,592 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~12#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,610 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2021-12-06 20:41:40,610 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,610 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,611 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,612 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2021-12-06 20:41:40,613 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,613 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,621 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,622 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,640 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:40,641 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,641 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,641 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,642 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2021-12-06 20:41:40,643 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,643 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,651 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 20:41:40,651 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~5#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 20:41:40,669 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2021-12-06 20:41:40,670 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,670 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,670 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2021-12-06 20:41:40,671 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 20:41:40,671 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,702 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:40,702 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,702 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:40,703 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:40,704 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2021-12-06 20:41:40,704 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-06 20:41:40,704 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 20:41:40,740 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-06 20:41:40,742 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2021-12-06 20:41:40,742 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 20:41:40,742 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 20:41:40,742 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 20:41:40,742 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 20:41:40,742 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-06 20:41:40,742 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:40,742 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 20:41:40,742 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 20:41:40,742 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec1_product19.cil.c_Iteration4_Loop [2021-12-06 20:41:40,742 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 20:41:40,742 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 20:41:40,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,824 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,839 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:40,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 20:41:41,191 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 20:41:41,194 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-06 20:41:41,195 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,195 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,196 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,197 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2021-12-06 20:41:41,198 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,205 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,206 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,206 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,206 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,206 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,208 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,208 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,209 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,228 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,228 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,228 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,229 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,230 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2021-12-06 20:41:41,230 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,237 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,237 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,237 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,238 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,238 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,238 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,238 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,239 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,258 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Ended with exit code 0 [2021-12-06 20:41:41,258 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,258 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,259 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,259 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2021-12-06 20:41:41,260 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,266 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,266 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,267 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,267 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,267 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,267 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,268 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,269 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,287 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2021-12-06 20:41:41,287 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,287 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,288 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2021-12-06 20:41:41,289 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,296 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,296 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,297 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,297 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,297 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,297 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,298 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,299 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,317 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2021-12-06 20:41:41,317 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,317 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,318 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,318 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2021-12-06 20:41:41,319 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,326 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,326 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,326 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,326 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,326 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,326 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,326 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,327 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,347 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2021-12-06 20:41:41,347 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,347 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,348 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,349 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2021-12-06 20:41:41,350 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,357 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,358 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,358 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,358 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,358 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,359 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,359 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,360 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,378 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Ended with exit code 0 [2021-12-06 20:41:41,379 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,379 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,379 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,380 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2021-12-06 20:41:41,381 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,387 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,388 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,388 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,388 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,388 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,388 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,388 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,389 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,407 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,407 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,407 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,408 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,409 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2021-12-06 20:41:41,409 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,416 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,416 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,416 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,416 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,416 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,417 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,417 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,418 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,436 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2021-12-06 20:41:41,437 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,437 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,437 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,438 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2021-12-06 20:41:41,439 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,445 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,445 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,446 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,446 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,446 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,446 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,446 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,447 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,465 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2021-12-06 20:41:41,465 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,465 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,466 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,467 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2021-12-06 20:41:41,467 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,474 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,474 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,474 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,474 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,474 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,475 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,475 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,476 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,494 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2021-12-06 20:41:41,494 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,494 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,495 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2021-12-06 20:41:41,496 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,503 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,503 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,503 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,503 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,503 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,504 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,504 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,505 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,523 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,523 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,523 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,524 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,525 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2021-12-06 20:41:41,526 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,533 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,533 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,533 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,533 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,533 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,534 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,534 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,535 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,553 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,553 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,554 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,554 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,555 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2021-12-06 20:41:41,556 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,563 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,563 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,563 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,563 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,563 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,563 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,563 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,565 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,582 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2021-12-06 20:41:41,583 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,583 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,584 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2021-12-06 20:41:41,585 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,592 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,592 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,592 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,592 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,592 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,592 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,592 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,593 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,611 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2021-12-06 20:41:41,612 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,612 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,612 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,613 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2021-12-06 20:41:41,614 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,621 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,621 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,621 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,621 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,621 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,622 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,622 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,623 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,641 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2021-12-06 20:41:41,641 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,641 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,642 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,643 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2021-12-06 20:41:41,644 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,651 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,651 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,651 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,651 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,651 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,653 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,653 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,655 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,673 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,673 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,673 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,674 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,675 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2021-12-06 20:41:41,675 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,682 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,682 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,682 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,682 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,682 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,683 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,683 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,684 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,701 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,702 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,702 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,702 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,703 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2021-12-06 20:41:41,704 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,711 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,711 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,711 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,711 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2021-12-06 20:41:41,712 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,714 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2021-12-06 20:41:41,714 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,717 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,735 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Ended with exit code 0 [2021-12-06 20:41:41,735 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,735 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,736 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,737 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2021-12-06 20:41:41,737 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,744 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,744 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,744 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,744 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,744 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,745 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,745 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,746 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,764 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2021-12-06 20:41:41,764 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,764 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,765 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,765 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2021-12-06 20:41:41,766 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,773 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,773 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,773 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,773 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,773 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,774 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,774 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,775 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,793 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Ended with exit code 0 [2021-12-06 20:41:41,793 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,793 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,794 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,795 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2021-12-06 20:41:41,795 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,803 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,803 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,803 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,803 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,803 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,804 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,804 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,805 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,823 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,823 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,823 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,824 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,825 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2021-12-06 20:41:41,825 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,832 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,832 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,832 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,832 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,832 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,833 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,833 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,834 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,852 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Ended with exit code 0 [2021-12-06 20:41:41,852 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,852 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,853 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,854 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2021-12-06 20:41:41,855 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,862 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,862 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,862 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,862 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,862 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,863 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,863 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,865 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,882 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:41,883 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,883 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,884 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2021-12-06 20:41:41,885 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,892 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,892 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,892 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,892 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2021-12-06 20:41:41,892 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,894 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2021-12-06 20:41:41,894 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,896 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,915 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Ended with exit code 0 [2021-12-06 20:41:41,915 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,915 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,916 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,916 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2021-12-06 20:41:41,917 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,924 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,924 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,924 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,925 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,925 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,925 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,925 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,926 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,944 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Ended with exit code 0 [2021-12-06 20:41:41,944 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,944 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,945 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,946 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Waiting until timeout for monitored process [2021-12-06 20:41:41,946 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,953 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,953 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,954 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,954 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,954 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,954 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,954 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,955 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:41,973 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Ended with exit code 0 [2021-12-06 20:41:41,973 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:41,973 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:41,974 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:41,975 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Waiting until timeout for monitored process [2021-12-06 20:41:41,975 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:41,982 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:41,982 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:41,982 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:41,982 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:41,983 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:41,983 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:41,983 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:41,984 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,002 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Ended with exit code 0 [2021-12-06 20:41:42,002 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,002 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,003 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,004 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Waiting until timeout for monitored process [2021-12-06 20:41:42,004 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,011 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,011 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,011 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,011 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,011 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,012 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,012 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,013 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,030 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Ended with exit code 0 [2021-12-06 20:41:42,031 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,031 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,031 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,032 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Waiting until timeout for monitored process [2021-12-06 20:41:42,033 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,040 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,040 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,040 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,040 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,040 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,040 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,041 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,042 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,059 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Ended with exit code 0 [2021-12-06 20:41:42,059 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,059 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,060 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,061 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Waiting until timeout for monitored process [2021-12-06 20:41:42,062 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,068 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,068 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,068 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,069 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,069 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,069 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,069 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,070 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,088 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Ended with exit code 0 [2021-12-06 20:41:42,088 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,088 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,089 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,090 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Waiting until timeout for monitored process [2021-12-06 20:41:42,091 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,097 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,097 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,098 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,098 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,098 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,098 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,098 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,099 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,117 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Ended with exit code 0 [2021-12-06 20:41:42,117 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,117 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,118 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Waiting until timeout for monitored process [2021-12-06 20:41:42,119 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,126 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,126 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,126 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,126 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,126 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,127 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,127 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,128 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,146 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Ended with exit code 0 [2021-12-06 20:41:42,146 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,146 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,147 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,149 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Waiting until timeout for monitored process [2021-12-06 20:41:42,150 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,158 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,158 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,158 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,158 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,158 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,158 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,158 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,160 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,177 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Ended with exit code 0 [2021-12-06 20:41:42,177 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,178 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,178 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,179 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Waiting until timeout for monitored process [2021-12-06 20:41:42,179 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,186 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,186 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,187 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,187 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,187 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,187 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,187 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,189 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,206 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Ended with exit code 0 [2021-12-06 20:41:42,206 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,206 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,207 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,208 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (54)] Waiting until timeout for monitored process [2021-12-06 20:41:42,208 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,215 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,215 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,215 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,215 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,216 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,216 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,216 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,217 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,235 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (54)] Ended with exit code 0 [2021-12-06 20:41:42,235 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,235 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,236 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,236 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (55)] Waiting until timeout for monitored process [2021-12-06 20:41:42,237 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,244 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,244 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,244 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,244 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,244 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,245 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,245 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,246 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,263 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (55)] Ended with exit code 0 [2021-12-06 20:41:42,263 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,264 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,264 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,265 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (56)] Waiting until timeout for monitored process [2021-12-06 20:41:42,265 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,272 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,272 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,272 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,272 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,273 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,273 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,273 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,274 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,292 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (56)] Ended with exit code 0 [2021-12-06 20:41:42,292 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,292 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,293 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,293 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (57)] Waiting until timeout for monitored process [2021-12-06 20:41:42,294 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,301 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,301 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,301 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,301 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,301 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,301 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,302 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,303 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,320 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (57)] Ended with exit code 0 [2021-12-06 20:41:42,320 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,321 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,321 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,322 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (58)] Waiting until timeout for monitored process [2021-12-06 20:41:42,323 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,329 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,330 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,330 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,330 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,330 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,330 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,330 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,331 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,349 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (58)] Ended with exit code 0 [2021-12-06 20:41:42,349 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,349 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,350 INFO L229 MonitoredProcess]: Starting monitored process 59 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,351 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (59)] Waiting until timeout for monitored process [2021-12-06 20:41:42,351 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,358 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,358 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,358 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,358 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,358 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,359 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,359 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,360 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,377 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (59)] Ended with exit code 0 [2021-12-06 20:41:42,377 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,378 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,378 INFO L229 MonitoredProcess]: Starting monitored process 60 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,379 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (60)] Waiting until timeout for monitored process [2021-12-06 20:41:42,380 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,387 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,387 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,387 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,387 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,387 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,387 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,387 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,389 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,406 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (60)] Ended with exit code 0 [2021-12-06 20:41:42,406 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,407 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,407 INFO L229 MonitoredProcess]: Starting monitored process 61 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,408 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (61)] Waiting until timeout for monitored process [2021-12-06 20:41:42,409 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,415 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,415 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,415 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,415 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,416 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,416 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,416 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,417 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,435 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (61)] Ended with exit code 0 [2021-12-06 20:41:42,435 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,435 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,436 INFO L229 MonitoredProcess]: Starting monitored process 62 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,437 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (62)] Waiting until timeout for monitored process [2021-12-06 20:41:42,437 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,444 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,444 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,444 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,444 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,444 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,445 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,445 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,446 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,464 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (62)] Forceful destruction successful, exit code 0 [2021-12-06 20:41:42,464 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,464 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,465 INFO L229 MonitoredProcess]: Starting monitored process 63 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,465 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (63)] Waiting until timeout for monitored process [2021-12-06 20:41:42,466 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,473 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,473 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,473 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,473 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,473 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,474 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,474 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,475 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 20:41:42,493 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (63)] Ended with exit code 0 [2021-12-06 20:41:42,493 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,493 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,494 INFO L229 MonitoredProcess]: Starting monitored process 64 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (64)] Waiting until timeout for monitored process [2021-12-06 20:41:42,495 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 20:41:42,503 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 20:41:42,503 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 20:41:42,503 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 20:41:42,503 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 20:41:42,503 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 20:41:42,504 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 20:41:42,505 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 20:41:42,508 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-06 20:41:42,512 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-12-06 20:41:42,512 INFO L444 ModelExtractionUtils]: 7 out of 9 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-06 20:41:42,513 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 20:41:42,513 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:41:42,514 INFO L229 MonitoredProcess]: Starting monitored process 65 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 20:41:42,515 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (65)] Waiting until timeout for monitored process [2021-12-06 20:41:42,515 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-06 20:41:42,515 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-06 20:41:42,515 INFO L513 LassoAnalysis]: Proved termination. [2021-12-06 20:41:42,515 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2021-12-06 20:41:42,540 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (64)] Ended with exit code 0 [2021-12-06 20:41:42,541 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-06 20:41:42,552 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:42,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:42,617 INFO L263 TraceCheckSpWp]: Trace formula consists of 662 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 20:41:42,619 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 20:41:42,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:42,713 INFO L263 TraceCheckSpWp]: Trace formula consists of 154 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 20:41:42,715 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 20:41:42,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:42,872 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2021-12-06 20:41:42,874 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 13778 states and 25369 transitions. cyclomatic complexity: 11593 Second operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:43,337 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (65)] Ended with exit code 0 [2021-12-06 20:41:43,741 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 13778 states and 25369 transitions. cyclomatic complexity: 11593. Second operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 40363 states and 74389 transitions. Complement of second has 11 states. [2021-12-06 20:41:43,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 6 states 1 stem states 4 non-accepting loop states 1 accepting loop states [2021-12-06 20:41:43,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:43,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 6873 transitions. [2021-12-06 20:41:43,752 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6873 transitions. Stem has 59 letters. Loop has 41 letters. [2021-12-06 20:41:43,754 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 20:41:43,755 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6873 transitions. Stem has 100 letters. Loop has 41 letters. [2021-12-06 20:41:43,756 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 20:41:43,756 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6873 transitions. Stem has 59 letters. Loop has 82 letters. [2021-12-06 20:41:43,758 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 20:41:43,758 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40363 states and 74389 transitions. [2021-12-06 20:41:44,001 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20427 [2021-12-06 20:41:44,155 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40363 states to 40363 states and 74389 transitions. [2021-12-06 20:41:44,155 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26768 [2021-12-06 20:41:44,177 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27169 [2021-12-06 20:41:44,177 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40363 states and 74389 transitions. [2021-12-06 20:41:44,177 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:41:44,177 INFO L681 BuchiCegarLoop]: Abstraction has 40363 states and 74389 transitions. [2021-12-06 20:41:44,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40363 states and 74389 transitions. [2021-12-06 20:41:44,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40363 to 39748. [2021-12-06 20:41:44,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39748 states, 39748 states have (on average 1.847011170373352) internal successors, (73415), 39747 states have internal predecessors, (73415), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:44,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39748 states to 39748 states and 73415 transitions. [2021-12-06 20:41:44,664 INFO L704 BuchiCegarLoop]: Abstraction has 39748 states and 73415 transitions. [2021-12-06 20:41:44,664 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:44,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 20:41:44,665 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:41:44,665 INFO L87 Difference]: Start difference. First operand 39748 states and 73415 transitions. Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:44,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:44,999 INFO L93 Difference]: Finished difference Result 79425 states and 146696 transitions. [2021-12-06 20:41:45,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 20:41:45,000 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 79425 states and 146696 transitions. [2021-12-06 20:41:45,247 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 40530 [2021-12-06 20:41:45,547 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 79425 states to 79425 states and 146696 transitions. [2021-12-06 20:41:45,547 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53129 [2021-12-06 20:41:45,613 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53129 [2021-12-06 20:41:45,613 INFO L73 IsDeterministic]: Start isDeterministic. Operand 79425 states and 146696 transitions. [2021-12-06 20:41:45,617 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:41:45,617 INFO L681 BuchiCegarLoop]: Abstraction has 79425 states and 146696 transitions. [2021-12-06 20:41:45,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79425 states and 146696 transitions. [2021-12-06 20:41:46,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79425 to 39748. [2021-12-06 20:41:46,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39748 states, 39748 states have (on average 1.8468602193821073) internal successors, (73409), 39747 states have internal predecessors, (73409), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:46,197 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39748 states to 39748 states and 73409 transitions. [2021-12-06 20:41:46,197 INFO L704 BuchiCegarLoop]: Abstraction has 39748 states and 73409 transitions. [2021-12-06 20:41:46,197 INFO L587 BuchiCegarLoop]: Abstraction has 39748 states and 73409 transitions. [2021-12-06 20:41:46,198 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-06 20:41:46,198 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39748 states and 73409 transitions. [2021-12-06 20:41:46,276 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20265 [2021-12-06 20:41:46,277 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:46,277 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:46,278 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:46,278 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:46,279 INFO L791 eck$LassoCheckResult]: Stem: 264565#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 264566#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 265251#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 265252#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 263816#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 263817#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 265607#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 266761#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 265009#L111 assume !(0 == getOrigin_~person#1); 262962#L115 assume !(1 == getOrigin_~person#1); 262963#L119 assume !(2 == getOrigin_~person#1); 266711#L123 assume !(3 == getOrigin_~person#1); 263722#L127 assume !(4 == getOrigin_~person#1); 263723#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 265859#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 265034#L551 assume 0 == initPersonOnFloor_~floor#1; 265035#L552 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 262918#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 264372#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 263433#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 263434#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 264032#L355-2 assume { :end_inline_callOnFloor } true; 264033#L695 assume { :end_inline_initPersonOnFloor } true; 265541#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 266662#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 263420#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 263492#L551-1 assume 0 == initPersonOnFloor_~floor#1; 265309#L552-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 262798#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 263301#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 263302#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 266545#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 262858#L355-5 assume { :end_inline_callOnFloor } true; 265744#L695-1 assume { :end_inline_initPersonOnFloor } true; 265745#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 266519#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 263606#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 263540#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 263541#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 265806#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 266829#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 266859#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 265050#L2489 assume !(0 != timeShift_~tmp___9~2#1); 265052#L2580 assume !(1 == ~doorState~0); 267245#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 274334#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 274329#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 267241#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 266862#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 263108#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 263109#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 265579#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 265580#L2277 assume !(1 == ~currentHeading~0); 266087#L2287 assume !(0 == ~currentFloorID~0); 264998#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 274693#L2293-1 assume { :end_inline_continueInDirection } true; 274691#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 274686#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 274683#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 274682#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 274675#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 274673#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 263198#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 266180#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 266181#L1006-2 assume !false; 281061#L1007 [2021-12-06 20:41:46,279 INFO L793 eck$LassoCheckResult]: Loop: 281061#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 292161#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 292160#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 292159#L1014 assume 1 != cleanup_~tmp___0~0#1; 292158#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 292153#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 292151#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 292133#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 292124#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 292123#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 292122#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 292117#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 283227#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 292115#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 292112#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 292113#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 296939#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 292095#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 292094#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 292092#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 292091#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 291958#L2491-2 assume !(0 != ~persons_0~0); 297910#L2491-3 assume !(0 != ~persons_1~0); 297905#L2505-1 assume !(0 != ~persons_2~0); 297895#L2519-1 assume !(0 != ~persons_3~0); 297889#L2533-1 assume !(0 != ~persons_4~0); 297884#L2547-1 assume !(0 != ~persons_5~0); 297880#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 297879#L371-12 assume 0 == isPersonOnFloor_~floor#1; 297790#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 297774#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 297772#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 297770#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 297769#L371-14 assume 0 == isPersonOnFloor_~floor#1; 297756#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 297727#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 297723#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 297717#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 297715#L371-16 assume 0 == isPersonOnFloor_~floor#1; 297696#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 297666#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 297664#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 297662#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 297661#L371-18 assume 0 == isPersonOnFloor_~floor#1; 297255#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 297245#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 297242#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 297240#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 297239#L371-20 assume 0 == isPersonOnFloor_~floor#1; 297201#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 297189#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 297187#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 297185#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 297183#L371-22 assume 0 == isPersonOnFloor_~floor#1; 297093#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 297071#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 297021#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 297010#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 296999#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 296984#L322-41 assume { :end_inline_resetCallOnFloor } true; 296979#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 296944#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 292202#L1651-5 assume { :end_inline_resetFloorButton } true; 292199#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 292198#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 292197#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 292183#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 292181#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 292178#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 292165#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 292163#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 292162#L1006-2 assume !false; 281061#L1007 [2021-12-06 20:41:46,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:46,280 INFO L85 PathProgramCache]: Analyzing trace with hash 1602558789, now seen corresponding path program 1 times [2021-12-06 20:41:46,280 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:46,280 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [886377361] [2021-12-06 20:41:46,280 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:46,280 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:46,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:46,320 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:46,320 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:46,320 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [886377361] [2021-12-06 20:41:46,320 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [886377361] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:46,321 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:46,321 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 20:41:46,321 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1607675295] [2021-12-06 20:41:46,321 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:46,321 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:46,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:46,321 INFO L85 PathProgramCache]: Analyzing trace with hash 1471638683, now seen corresponding path program 1 times [2021-12-06 20:41:46,321 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:46,321 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1921581725] [2021-12-06 20:41:46,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:46,322 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:46,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:46,356 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:46,356 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:46,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1921581725] [2021-12-06 20:41:46,356 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1921581725] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:46,356 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:46,356 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 20:41:46,356 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1612196523] [2021-12-06 20:41:46,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:46,357 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:46,357 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:46,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:41:46,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:41:46,357 INFO L87 Difference]: Start difference. First operand 39748 states and 73409 transitions. cyclomatic complexity: 33670 Second operand has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:46,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:46,923 INFO L93 Difference]: Finished difference Result 119054 states and 219886 transitions. [2021-12-06 20:41:46,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 20:41:46,924 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 119054 states and 219886 transitions. [2021-12-06 20:41:47,407 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 60795 [2021-12-06 20:41:47,904 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 119054 states to 119054 states and 219886 transitions. [2021-12-06 20:41:47,904 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 79610 [2021-12-06 20:41:47,940 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 79610 [2021-12-06 20:41:47,940 INFO L73 IsDeterministic]: Start isDeterministic. Operand 119054 states and 219886 transitions. [2021-12-06 20:41:47,943 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:41:47,943 INFO L681 BuchiCegarLoop]: Abstraction has 119054 states and 219886 transitions. [2021-12-06 20:41:47,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119054 states and 219886 transitions. [2021-12-06 20:41:48,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119054 to 39744. [2021-12-06 20:41:48,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39744 states, 39744 states have (on average 1.8467693236714975) internal successors, (73398), 39743 states have internal predecessors, (73398), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:48,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39744 states to 39744 states and 73398 transitions. [2021-12-06 20:41:48,545 INFO L704 BuchiCegarLoop]: Abstraction has 39744 states and 73398 transitions. [2021-12-06 20:41:48,545 INFO L587 BuchiCegarLoop]: Abstraction has 39744 states and 73398 transitions. [2021-12-06 20:41:48,545 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-06 20:41:48,545 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39744 states and 73398 transitions. [2021-12-06 20:41:48,620 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20265 [2021-12-06 20:41:48,620 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:48,620 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:48,622 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:48,622 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:48,622 INFO L791 eck$LassoCheckResult]: Stem: 423394#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 423395#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 424074#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 424075#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 422643#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 422644#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 424429#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 425537#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 423840#L111 assume !(0 == getOrigin_~person#1); 421787#L115 assume !(1 == getOrigin_~person#1); 421788#L119 assume !(2 == getOrigin_~person#1); 425490#L123 assume !(3 == getOrigin_~person#1); 422549#L127 assume !(4 == getOrigin_~person#1); 422550#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 424674#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 423865#L551 assume !(0 == initPersonOnFloor_~floor#1); 423866#L578 assume 1 == initPersonOnFloor_~floor#1; 424449#L579 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 421744#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 423199#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 422257#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 422258#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 422856#L355-2 assume { :end_inline_callOnFloor } true; 422857#L695 assume { :end_inline_initPersonOnFloor } true; 424358#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 425436#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 422244#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 424129#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 424130#L578-1 assume 1 == initPersonOnFloor_~floor#1; 423534#L579-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 421624#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 422126#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 422127#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 425332#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 421684#L355-5 assume { :end_inline_callOnFloor } true; 424561#L695-1 assume { :end_inline_initPersonOnFloor } true; 424562#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 425303#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 422433#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 422366#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 422367#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 424619#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 425596#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 425523#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 423879#L2489 assume !(0 != timeShift_~tmp___9~2#1); 422596#L2580 assume !(1 == ~doorState~0); 422598#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 425033#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 425199#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 425200#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 433535#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 433187#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 433185#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 433183#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 433181#L2277 assume !(1 == ~currentHeading~0); 433182#L2287 assume !(0 == ~currentFloorID~0); 423829#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 433050#L2293-1 assume { :end_inline_continueInDirection } true; 438792#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 438791#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 438790#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 438788#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 438789#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 438787#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 422021#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 424996#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 424997#L1006-2 assume !false; 439588#L1007 [2021-12-06 20:41:48,622 INFO L793 eck$LassoCheckResult]: Loop: 439588#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 451587#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 451586#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 451585#L1014 assume 1 != cleanup_~tmp___0~0#1; 451584#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 451583#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 451582#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 450529#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 450520#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 450514#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 450511#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 450496#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 443575#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 450493#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 450490#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 450479#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 450474#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 450461#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 450457#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 450453#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 450450#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 450451#L2491-2 assume !(0 != ~persons_0~0); 454939#L2491-3 assume !(0 != ~persons_1~0); 454538#L2505-1 assume !(0 != ~persons_2~0); 454528#L2519-1 assume !(0 != ~persons_3~0); 454522#L2533-1 assume !(0 != ~persons_4~0); 454517#L2547-1 assume !(0 != ~persons_5~0); 454513#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 454511#L371-12 assume 0 == isPersonOnFloor_~floor#1; 454484#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 454468#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 454466#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 454464#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 454463#L371-14 assume 0 == isPersonOnFloor_~floor#1; 454450#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 454421#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 454417#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 454411#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 454409#L371-16 assume 0 == isPersonOnFloor_~floor#1; 454390#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 454360#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 454358#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 454356#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 454355#L371-18 assume 0 == isPersonOnFloor_~floor#1; 454256#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 454250#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 454248#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 454246#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 454245#L371-20 assume 0 == isPersonOnFloor_~floor#1; 454220#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 454178#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 453153#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 452937#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 452936#L371-22 assume 0 == isPersonOnFloor_~floor#1; 451638#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 451621#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 451619#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 451617#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 451613#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 451609#L322-41 assume { :end_inline_resetCallOnFloor } true; 451608#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 451606#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 451602#L1651-5 assume { :end_inline_resetFloorButton } true; 451601#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 451600#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 451599#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 451598#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 450587#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 451596#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 450575#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 451589#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 451588#L1006-2 assume !false; 439588#L1007 [2021-12-06 20:41:48,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:48,623 INFO L85 PathProgramCache]: Analyzing trace with hash -1276816557, now seen corresponding path program 1 times [2021-12-06 20:41:48,623 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:48,623 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1165867993] [2021-12-06 20:41:48,623 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:48,623 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:48,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:48,765 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:48,765 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:48,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1165867993] [2021-12-06 20:41:48,766 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1165867993] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:48,766 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:48,766 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:41:48,766 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [954905171] [2021-12-06 20:41:48,766 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:48,766 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:48,767 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:48,767 INFO L85 PathProgramCache]: Analyzing trace with hash 1471638683, now seen corresponding path program 2 times [2021-12-06 20:41:48,767 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:48,767 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [40818864] [2021-12-06 20:41:48,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:48,767 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:48,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:48,813 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:48,814 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:48,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [40818864] [2021-12-06 20:41:48,814 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [40818864] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:48,814 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:48,814 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 20:41:48,814 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165830949] [2021-12-06 20:41:48,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:48,814 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:48,814 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:48,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 20:41:48,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:41:48,815 INFO L87 Difference]: Start difference. First operand 39744 states and 73398 transitions. cyclomatic complexity: 33663 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:49,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:49,142 INFO L93 Difference]: Finished difference Result 79415 states and 146659 transitions. [2021-12-06 20:41:49,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:41:49,143 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 79415 states and 146659 transitions. [2021-12-06 20:41:49,395 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 40530 [2021-12-06 20:41:49,715 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 79415 states to 79415 states and 146659 transitions. [2021-12-06 20:41:49,716 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53119 [2021-12-06 20:41:49,738 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53119 [2021-12-06 20:41:49,738 INFO L73 IsDeterministic]: Start isDeterministic. Operand 79415 states and 146659 transitions. [2021-12-06 20:41:49,738 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:41:49,738 INFO L681 BuchiCegarLoop]: Abstraction has 79415 states and 146659 transitions. [2021-12-06 20:41:49,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79415 states and 146659 transitions. [2021-12-06 20:41:50,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79415 to 39744. [2021-12-06 20:41:50,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39744 states, 39744 states have (on average 1.8465428743961352) internal successors, (73389), 39743 states have internal predecessors, (73389), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:50,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39744 states to 39744 states and 73389 transitions. [2021-12-06 20:41:50,182 INFO L704 BuchiCegarLoop]: Abstraction has 39744 states and 73389 transitions. [2021-12-06 20:41:50,182 INFO L587 BuchiCegarLoop]: Abstraction has 39744 states and 73389 transitions. [2021-12-06 20:41:50,182 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-06 20:41:50,182 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39744 states and 73389 transitions. [2021-12-06 20:41:50,348 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20265 [2021-12-06 20:41:50,348 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:50,349 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:50,350 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:50,350 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:50,350 INFO L791 eck$LassoCheckResult]: Stem: 542567#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 542568#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 543253#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 543254#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 541817#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 541818#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 543595#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 544706#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 543014#L111 assume !(0 == getOrigin_~person#1); 540961#L115 assume !(1 == getOrigin_~person#1); 540962#L119 assume !(2 == getOrigin_~person#1); 544656#L123 assume !(3 == getOrigin_~person#1); 541724#L127 assume !(4 == getOrigin_~person#1); 541725#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 543841#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 543039#L551 assume !(0 == initPersonOnFloor_~floor#1); 543040#L578 assume 1 == initPersonOnFloor_~floor#1; 543616#L579 assume !(0 == initPersonOnFloor_~person#1); 542586#L582 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 540918#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 542371#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 541429#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 541430#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 542032#L355-2 assume { :end_inline_callOnFloor } true; 542033#L695 assume { :end_inline_initPersonOnFloor } true; 543531#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 544604#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 541416#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 541489#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 543311#L578-1 assume 1 == initPersonOnFloor_~floor#1; 542708#L579-2 assume !(0 == initPersonOnFloor_~person#1); 542709#L582-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 540798#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 541298#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 541299#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 544496#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 540858#L355-5 assume { :end_inline_callOnFloor } true; 543725#L695-1 assume { :end_inline_initPersonOnFloor } true; 543726#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 544469#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 541604#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 541538#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 541539#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 543786#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 544767#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 544786#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 543055#L2489 assume !(0 != timeShift_~tmp___9~2#1); 543057#L2580 assume !(1 == ~doorState~0); 551939#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 551938#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 551937#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 551936#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 544790#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 544791#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 543697#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 543566#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 543568#L2277 assume !(1 == ~currentHeading~0); 544060#L2287 assume !(0 == ~currentFloorID~0); 543003#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 544557#L2293-1 assume { :end_inline_continueInDirection } true; 541437#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 555828#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 555827#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 555825#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 555826#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 555808#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 555807#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 555805#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 555518#L1006-2 assume !false; 555519#L1007 [2021-12-06 20:41:50,350 INFO L793 eck$LassoCheckResult]: Loop: 555519#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 568907#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 568892#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 568887#L1014 assume 1 != cleanup_~tmp___0~0#1; 568882#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 568881#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 568868#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 568858#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 568848#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 568846#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 568845#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 568843#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 562457#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 568838#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 568836#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 568814#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 568800#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 568789#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 568783#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 568780#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 568777#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 568778#L2491-2 assume !(0 != ~persons_0~0); 574493#L2491-3 assume !(0 != ~persons_1~0); 574486#L2505-1 assume !(0 != ~persons_2~0); 574481#L2519-1 assume !(0 != ~persons_3~0); 574475#L2533-1 assume !(0 != ~persons_4~0); 574447#L2547-1 assume !(0 != ~persons_5~0); 574441#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 574439#L371-12 assume 0 == isPersonOnFloor_~floor#1; 571936#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 571921#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 571918#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 571916#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 571915#L371-14 assume 0 == isPersonOnFloor_~floor#1; 571895#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 571866#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 571862#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 571861#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 571859#L371-16 assume 0 == isPersonOnFloor_~floor#1; 571849#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 571819#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 571817#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 571815#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 571814#L371-18 assume 0 == isPersonOnFloor_~floor#1; 571775#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 571765#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 571762#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 571760#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 571759#L371-20 assume 0 == isPersonOnFloor_~floor#1; 571721#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 571709#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 571707#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 571705#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 571704#L371-22 assume 0 == isPersonOnFloor_~floor#1; 571616#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 571599#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 571597#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 571595#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 571593#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 571589#L322-41 assume { :end_inline_resetCallOnFloor } true; 571588#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 571164#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 568959#L1651-5 assume { :end_inline_resetFloorButton } true; 568955#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 568953#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 568952#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 568950#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 568951#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 568941#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 568915#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 568914#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 568913#L1006-2 assume !false; 555519#L1007 [2021-12-06 20:41:50,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:50,351 INFO L85 PathProgramCache]: Analyzing trace with hash -794802971, now seen corresponding path program 1 times [2021-12-06 20:41:50,351 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:50,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271579697] [2021-12-06 20:41:50,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:50,351 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:50,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:50,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:50,381 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:50,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271579697] [2021-12-06 20:41:50,381 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271579697] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:50,381 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:50,381 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:41:50,381 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [566321348] [2021-12-06 20:41:50,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:50,381 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:50,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:50,382 INFO L85 PathProgramCache]: Analyzing trace with hash 1471638683, now seen corresponding path program 3 times [2021-12-06 20:41:50,382 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:50,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1770363690] [2021-12-06 20:41:50,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:50,382 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:50,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:50,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:50,416 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:50,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1770363690] [2021-12-06 20:41:50,416 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1770363690] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:50,416 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:50,417 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 20:41:50,417 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821138305] [2021-12-06 20:41:50,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:50,417 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:50,417 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:50,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 20:41:50,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:41:50,417 INFO L87 Difference]: Start difference. First operand 39744 states and 73389 transitions. cyclomatic complexity: 33654 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:50,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:50,812 INFO L93 Difference]: Finished difference Result 79415 states and 146646 transitions. [2021-12-06 20:41:50,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:41:50,813 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 79415 states and 146646 transitions. [2021-12-06 20:41:51,123 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 40530 [2021-12-06 20:41:51,369 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 79415 states to 79415 states and 146646 transitions. [2021-12-06 20:41:51,369 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53119 [2021-12-06 20:41:51,409 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53119 [2021-12-06 20:41:51,410 INFO L73 IsDeterministic]: Start isDeterministic. Operand 79415 states and 146646 transitions. [2021-12-06 20:41:51,416 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:41:51,416 INFO L681 BuchiCegarLoop]: Abstraction has 79415 states and 146646 transitions. [2021-12-06 20:41:51,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79415 states and 146646 transitions. [2021-12-06 20:41:51,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79415 to 39744. [2021-12-06 20:41:51,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39744 states, 39744 states have (on average 1.8463164251207729) internal successors, (73380), 39743 states have internal predecessors, (73380), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:52,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39744 states to 39744 states and 73380 transitions. [2021-12-06 20:41:52,045 INFO L704 BuchiCegarLoop]: Abstraction has 39744 states and 73380 transitions. [2021-12-06 20:41:52,045 INFO L587 BuchiCegarLoop]: Abstraction has 39744 states and 73380 transitions. [2021-12-06 20:41:52,045 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-06 20:41:52,045 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39744 states and 73380 transitions. [2021-12-06 20:41:52,127 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20265 [2021-12-06 20:41:52,127 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:52,127 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:52,128 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:52,128 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:52,129 INFO L791 eck$LassoCheckResult]: Stem: 661739#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 661740#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 662409#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 662410#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 660991#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 660992#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 662756#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 663842#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 662181#L111 assume !(0 == getOrigin_~person#1); 660135#L115 assume !(1 == getOrigin_~person#1); 660136#L119 assume !(2 == getOrigin_~person#1); 663790#L123 assume !(3 == getOrigin_~person#1); 660898#L127 assume !(4 == getOrigin_~person#1); 660899#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 662997#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 662206#L551 assume !(0 == initPersonOnFloor_~floor#1); 662207#L578 assume 1 == initPersonOnFloor_~floor#1; 662777#L579 assume !(0 == initPersonOnFloor_~person#1); 661757#L582 assume !(1 == initPersonOnFloor_~person#1); 661758#L585 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 660092#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 661543#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 660605#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 660606#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 661206#L355-2 assume { :end_inline_callOnFloor } true; 661207#L695 assume { :end_inline_initPersonOnFloor } true; 662690#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 663741#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 660592#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 660664#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 662465#L578-1 assume 1 == initPersonOnFloor_~floor#1; 661880#L579-2 assume !(0 == initPersonOnFloor_~person#1); 661881#L582-2 assume !(1 == initPersonOnFloor_~person#1); 661469#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 659972#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 660474#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 660475#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 663632#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 660032#L355-5 assume { :end_inline_callOnFloor } true; 662887#L695-1 assume { :end_inline_initPersonOnFloor } true; 662888#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 663602#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 660779#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 660713#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 660714#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 662945#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 663900#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 663916#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 671791#L2489 assume !(0 != timeShift_~tmp___9~2#1); 671789#L2580 assume !(1 == ~doorState~0); 671790#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 671889#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 671888#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 671883#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 671881#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 671423#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 671422#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 671412#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 671411#L2277 assume !(1 == ~currentHeading~0); 663702#L2287 assume !(0 == ~currentFloorID~0); 662170#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 663696#L2293-1 assume { :end_inline_continueInDirection } true; 660253#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 660254#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 661442#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 663504#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 663505#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 662920#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 660370#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 663305#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 663306#L1006-2 assume !false; 678865#L1007 [2021-12-06 20:41:52,129 INFO L793 eck$LassoCheckResult]: Loop: 678865#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 688171#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 688169#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 688132#L1014 assume 1 != cleanup_~tmp___0~0#1; 688127#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 688121#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 688092#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 688093#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 689150#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 689149#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 689148#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 689147#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 680305#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 689146#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 689144#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 689145#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 689682#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 689674#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 689673#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 689671#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 689670#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 689647#L2491-2 assume !(0 != ~persons_0~0); 691081#L2491-3 assume !(0 != ~persons_1~0); 691076#L2505-1 assume !(0 != ~persons_2~0); 691066#L2519-1 assume !(0 != ~persons_3~0); 691060#L2533-1 assume !(0 != ~persons_4~0); 691055#L2547-1 assume !(0 != ~persons_5~0); 691047#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 691044#L371-12 assume 0 == isPersonOnFloor_~floor#1; 691021#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 691005#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 691003#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 691001#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 690999#L371-14 assume 0 == isPersonOnFloor_~floor#1; 690990#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 690961#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 690957#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 690956#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 690955#L371-16 assume 0 == isPersonOnFloor_~floor#1; 690942#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 690912#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 690910#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 690908#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 690907#L371-18 assume 0 == isPersonOnFloor_~floor#1; 690878#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 690868#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 690865#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 690863#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 690862#L371-20 assume 0 == isPersonOnFloor_~floor#1; 690824#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 690812#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 690810#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 690808#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 690806#L371-22 assume 0 == isPersonOnFloor_~floor#1; 690044#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 690027#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 690025#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 690023#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 690021#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 690017#L322-41 assume { :end_inline_resetCallOnFloor } true; 690016#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 690011#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 690007#L1651-5 assume { :end_inline_resetFloorButton } true; 690005#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 690004#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 690003#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 689994#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 689992#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 688208#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 688196#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 688186#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 688174#L1006-2 assume !false; 678865#L1007 [2021-12-06 20:41:52,129 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:52,129 INFO L85 PathProgramCache]: Analyzing trace with hash -1078681463, now seen corresponding path program 1 times [2021-12-06 20:41:52,130 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:52,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [886924158] [2021-12-06 20:41:52,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:52,130 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:52,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:52,157 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:52,157 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:52,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [886924158] [2021-12-06 20:41:52,158 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [886924158] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:52,158 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:52,158 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:41:52,158 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546142383] [2021-12-06 20:41:52,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:52,158 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:52,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:52,159 INFO L85 PathProgramCache]: Analyzing trace with hash 1471638683, now seen corresponding path program 4 times [2021-12-06 20:41:52,159 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:52,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208571602] [2021-12-06 20:41:52,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:52,159 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:52,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:52,190 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:52,190 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:52,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208571602] [2021-12-06 20:41:52,191 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208571602] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:52,191 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:52,191 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 20:41:52,191 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408746084] [2021-12-06 20:41:52,191 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:52,191 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:52,191 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:52,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 20:41:52,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:41:52,192 INFO L87 Difference]: Start difference. First operand 39744 states and 73380 transitions. cyclomatic complexity: 33645 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:52,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:52,808 INFO L93 Difference]: Finished difference Result 158697 states and 293074 transitions. [2021-12-06 20:41:52,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:41:52,810 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 158697 states and 293074 transitions. [2021-12-06 20:41:53,330 INFO L131 ngComponentsAnalysis]: Automaton has 28 accepting balls. 81060 [2021-12-06 20:41:53,891 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 158697 states to 158697 states and 293074 transitions. [2021-12-06 20:41:53,891 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 106105 [2021-12-06 20:41:53,944 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 106105 [2021-12-06 20:41:53,944 INFO L73 IsDeterministic]: Start isDeterministic. Operand 158697 states and 293074 transitions. [2021-12-06 20:41:53,947 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:41:53,947 INFO L681 BuchiCegarLoop]: Abstraction has 158697 states and 293074 transitions. [2021-12-06 20:41:54,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158697 states and 293074 transitions. [2021-12-06 20:41:54,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158697 to 39744. [2021-12-06 20:41:54,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39744 states, 39744 states have (on average 1.8462157809983897) internal successors, (73376), 39743 states have internal predecessors, (73376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:54,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39744 states to 39744 states and 73376 transitions. [2021-12-06 20:41:54,682 INFO L704 BuchiCegarLoop]: Abstraction has 39744 states and 73376 transitions. [2021-12-06 20:41:54,682 INFO L587 BuchiCegarLoop]: Abstraction has 39744 states and 73376 transitions. [2021-12-06 20:41:54,682 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-06 20:41:54,682 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39744 states and 73376 transitions. [2021-12-06 20:41:54,765 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20265 [2021-12-06 20:41:54,765 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:54,765 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:54,767 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:54,767 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:54,767 INFO L791 eck$LassoCheckResult]: Stem: 860198#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 860199#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 860872#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 860873#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 859451#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 859452#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 861217#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 862333#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 860640#L111 assume !(0 == getOrigin_~person#1); 858591#L115 assume !(1 == getOrigin_~person#1); 858592#L119 assume !(2 == getOrigin_~person#1); 862284#L123 assume !(3 == getOrigin_~person#1); 859358#L127 assume !(4 == getOrigin_~person#1); 859359#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 861463#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 860665#L551 assume !(0 == initPersonOnFloor_~floor#1); 860666#L578 assume !(1 == initPersonOnFloor_~floor#1); 861238#L605 assume !(2 == initPersonOnFloor_~floor#1); 859881#L632 assume !(3 == initPersonOnFloor_~floor#1); 859883#L659 assume !(4 == initPersonOnFloor_~floor#1); 858548#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 860003#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 859063#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 859064#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 859666#L355-2 assume { :end_inline_callOnFloor } true; 859667#L695 assume { :end_inline_initPersonOnFloor } true; 861154#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 862237#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 859050#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 859123#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 860928#L578-1 assume 1 == initPersonOnFloor_~floor#1; 860340#L579-2 assume !(0 == initPersonOnFloor_~person#1); 860341#L582-2 assume !(1 == initPersonOnFloor_~person#1); 859930#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 858428#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 858932#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 858933#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 862124#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 858488#L355-5 assume { :end_inline_callOnFloor } true; 861350#L695-1 assume { :end_inline_initPersonOnFloor } true; 861351#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 862094#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 859239#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 859172#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 859173#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 861408#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 862390#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 862408#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 871560#L2489 assume !(0 != timeShift_~tmp___9~2#1); 859404#L2580 assume !(1 == ~doorState~0); 859406#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 858762#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 858763#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 870329#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 870326#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 869965#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 869964#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 869959#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 869957#L2277 assume !(1 == ~currentHeading~0); 862197#L2287 assume !(0 == ~currentFloorID~0); 862198#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 862409#L2293-1 assume { :end_inline_continueInDirection } true; 859071#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 859902#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 859903#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 861993#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 861994#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 861384#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 858828#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 862394#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 877140#L1006-2 assume !false; 877141#L1007 [2021-12-06 20:41:54,767 INFO L793 eck$LassoCheckResult]: Loop: 877141#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 886595#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 886594#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 886592#L1014 assume 1 != cleanup_~tmp___0~0#1; 886590#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 886588#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 886546#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 886547#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 888120#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 888119#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 888118#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 888117#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 879074#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 888116#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 888114#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 888112#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 888108#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 888034#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 888033#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 888030#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 888027#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 886432#L2491-2 assume !(0 != ~persons_0~0); 896628#L2491-3 assume !(0 != ~persons_1~0); 896618#L2505-1 assume !(0 != ~persons_2~0); 896612#L2519-1 assume !(0 != ~persons_3~0); 896607#L2533-1 assume !(0 != ~persons_4~0); 896597#L2547-1 assume !(0 != ~persons_5~0); 896592#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 896590#L371-12 assume 0 == isPersonOnFloor_~floor#1; 896489#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 896473#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 896471#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 896469#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 896463#L371-14 assume 0 == isPersonOnFloor_~floor#1; 896420#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 896395#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 896392#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 896292#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 896290#L371-16 assume 0 == isPersonOnFloor_~floor#1; 896281#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 896251#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 896249#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 896247#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 896240#L371-18 assume 0 == isPersonOnFloor_~floor#1; 896207#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 896190#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 896186#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 896178#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 896173#L371-20 assume 0 == isPersonOnFloor_~floor#1; 896142#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 896094#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 896090#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 896069#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 896068#L371-22 assume 0 == isPersonOnFloor_~floor#1; 895986#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 895962#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 895952#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 895949#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 895947#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 895943#L322-41 assume { :end_inline_resetCallOnFloor } true; 895938#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 895935#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 886647#L1651-5 assume { :end_inline_resetFloorButton } true; 886644#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 886637#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 886636#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 886635#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 886634#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 886619#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 886609#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 886600#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 886598#L1006-2 assume !false; 877141#L1007 [2021-12-06 20:41:54,767 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:54,768 INFO L85 PathProgramCache]: Analyzing trace with hash -276278263, now seen corresponding path program 1 times [2021-12-06 20:41:54,768 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:54,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [582669616] [2021-12-06 20:41:54,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:54,768 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:54,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:54,795 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:54,795 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:54,795 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [582669616] [2021-12-06 20:41:54,795 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [582669616] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:54,795 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:54,795 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:41:54,795 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1695176589] [2021-12-06 20:41:54,795 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:54,796 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:54,796 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:54,796 INFO L85 PathProgramCache]: Analyzing trace with hash 1471638683, now seen corresponding path program 5 times [2021-12-06 20:41:54,796 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:54,796 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [190151169] [2021-12-06 20:41:54,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:54,796 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:54,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:54,827 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:54,828 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:54,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [190151169] [2021-12-06 20:41:54,828 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [190151169] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:54,828 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:54,828 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 20:41:54,828 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [844358871] [2021-12-06 20:41:54,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:54,828 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:54,828 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:54,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 20:41:54,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:41:54,829 INFO L87 Difference]: Start difference. First operand 39744 states and 73376 transitions. cyclomatic complexity: 33641 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:55,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:41:55,359 INFO L93 Difference]: Finished difference Result 119014 states and 219787 transitions. [2021-12-06 20:41:55,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:41:55,360 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 119014 states and 219787 transitions. [2021-12-06 20:41:55,833 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 60795 [2021-12-06 20:41:56,200 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 119014 states to 119014 states and 219787 transitions. [2021-12-06 20:41:56,200 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 79570 [2021-12-06 20:41:56,259 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 79570 [2021-12-06 20:41:56,260 INFO L73 IsDeterministic]: Start isDeterministic. Operand 119014 states and 219787 transitions. [2021-12-06 20:41:56,263 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:41:56,263 INFO L681 BuchiCegarLoop]: Abstraction has 119014 states and 219787 transitions. [2021-12-06 20:41:56,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119014 states and 219787 transitions. [2021-12-06 20:41:56,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119014 to 39726. [2021-12-06 20:41:56,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39726 states, 39726 states have (on average 1.8462719629461812) internal successors, (73345), 39725 states have internal predecessors, (73345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:41:57,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39726 states to 39726 states and 73345 transitions. [2021-12-06 20:41:57,049 INFO L704 BuchiCegarLoop]: Abstraction has 39726 states and 73345 transitions. [2021-12-06 20:41:57,049 INFO L587 BuchiCegarLoop]: Abstraction has 39726 states and 73345 transitions. [2021-12-06 20:41:57,049 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-06 20:41:57,049 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39726 states and 73345 transitions. [2021-12-06 20:41:57,131 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20265 [2021-12-06 20:41:57,131 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:41:57,131 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:41:57,133 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:57,133 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:41:57,133 INFO L791 eck$LassoCheckResult]: Stem: 1018959#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1018960#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1019629#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1019630#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1018213#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1018214#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1019963#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1021086#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1019399#L111 assume !(0 == getOrigin_~person#1); 1017361#L115 assume !(1 == getOrigin_~person#1); 1017362#L119 assume !(2 == getOrigin_~person#1); 1021036#L123 assume !(3 == getOrigin_~person#1); 1018121#L127 assume !(4 == getOrigin_~person#1); 1018122#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1020213#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1019424#L551 assume !(0 == initPersonOnFloor_~floor#1); 1019425#L578 assume 1 == initPersonOnFloor_~floor#1; 1019984#L579 assume !(0 == initPersonOnFloor_~person#1); 1018978#L582 assume !(1 == initPersonOnFloor_~person#1); 1018979#L585 assume !(2 == initPersonOnFloor_~person#1); 1020018#L588 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 1020077#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1018766#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1017829#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1017830#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1018431#L355-2 assume { :end_inline_callOnFloor } true; 1018432#L695 assume { :end_inline_initPersonOnFloor } true; 1019897#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1020987#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1017889#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1017890#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 1019683#L578-1 assume 1 == initPersonOnFloor_~floor#1; 1019099#L579-2 assume !(0 == initPersonOnFloor_~person#1); 1019100#L582-2 assume !(1 == initPersonOnFloor_~person#1); 1018691#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1017201#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1017697#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1017698#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1020879#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1017261#L355-5 assume { :end_inline_callOnFloor } true; 1020099#L695-1 assume { :end_inline_initPersonOnFloor } true; 1020100#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1020852#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1018005#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1017938#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1017939#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1020159#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 1021143#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1021168#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1019436#L2489 assume !(0 != timeShift_~tmp___9~2#1); 1019438#L2580 assume !(1 == ~doorState~0); 1021474#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1023256#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1023255#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1023254#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 1021172#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1021173#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 1023068#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 1023069#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1023055#L2277 assume !(1 == ~currentHeading~0); 1023056#L2287 assume !(0 == ~currentFloorID~0); 1020942#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1020943#L2293-1 assume { :end_inline_continueInDirection } true; 1017837#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1029302#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1021107#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1020755#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1020757#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1023051#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1023052#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1034859#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1034853#L1006-2 assume !false; 1034854#L1007 [2021-12-06 20:41:57,133 INFO L793 eck$LassoCheckResult]: Loop: 1034854#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1043627#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1043626#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1043625#L1014 assume 1 != cleanup_~tmp___0~0#1; 1043620#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1043618#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1043617#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1043591#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1043582#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1043581#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1043580#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1043575#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1037650#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1043573#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1043571#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1043572#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1044230#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 1043555#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 1043554#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1043547#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1043544#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1043545#L2491-2 assume !(0 != ~persons_0~0); 1046731#L2491-3 assume !(0 != ~persons_1~0); 1046726#L2505-1 assume !(0 != ~persons_2~0); 1046716#L2519-1 assume !(0 != ~persons_3~0); 1046710#L2533-1 assume !(0 != ~persons_4~0); 1046705#L2547-1 assume !(0 != ~persons_5~0); 1046701#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1046700#L371-12 assume 0 == isPersonOnFloor_~floor#1; 1046675#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1046659#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1046657#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 1046655#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1046440#L371-14 assume 0 == isPersonOnFloor_~floor#1; 1044757#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1044728#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1044724#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1044718#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1044716#L371-16 assume 0 == isPersonOnFloor_~floor#1; 1044697#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1044667#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1044665#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1044663#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1044662#L371-18 assume 0 == isPersonOnFloor_~floor#1; 1044538#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1044532#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1044530#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1044528#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1044527#L371-20 assume 0 == isPersonOnFloor_~floor#1; 1044464#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1044452#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 1044450#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1044448#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1044447#L371-22 assume 0 == isPersonOnFloor_~floor#1; 1043697#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1043680#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 1043678#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1043676#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1043674#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1043670#L322-41 assume { :end_inline_resetCallOnFloor } true; 1043669#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1043667#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1043663#L1651-5 assume { :end_inline_resetFloorButton } true; 1043662#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1043661#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1043660#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1043654#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1043652#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1043640#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1043630#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1043629#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1043628#L1006-2 assume !false; 1034854#L1007 [2021-12-06 20:41:57,134 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:57,134 INFO L85 PathProgramCache]: Analyzing trace with hash -413985271, now seen corresponding path program 1 times [2021-12-06 20:41:57,134 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:57,134 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2021739775] [2021-12-06 20:41:57,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:57,134 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:57,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:57,168 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:57,168 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:57,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2021739775] [2021-12-06 20:41:57,168 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2021739775] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:57,168 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:57,168 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:41:57,169 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892224729] [2021-12-06 20:41:57,169 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:57,169 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:41:57,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:41:57,169 INFO L85 PathProgramCache]: Analyzing trace with hash 1471638683, now seen corresponding path program 6 times [2021-12-06 20:41:57,169 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:41:57,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336694644] [2021-12-06 20:41:57,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:41:57,170 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:41:57,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:41:57,204 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:41:57,205 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:41:57,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336694644] [2021-12-06 20:41:57,205 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336694644] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:41:57,205 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:41:57,205 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 20:41:57,205 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1584621821] [2021-12-06 20:41:57,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:41:57,205 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:41:57,205 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:41:57,206 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 20:41:57,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-06 20:41:57,206 INFO L87 Difference]: Start difference. First operand 39726 states and 73345 transitions. cyclomatic complexity: 33628 Second operand has 8 states, 8 states have (on average 9.0) internal successors, (72), 8 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:00,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:00,406 INFO L93 Difference]: Finished difference Result 425005 states and 782146 transitions. [2021-12-06 20:42:00,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-12-06 20:42:00,408 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 425005 states and 782146 transitions. [2021-12-06 20:42:02,123 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 184850 [2021-12-06 20:42:03,385 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 425005 states to 425005 states and 782146 transitions. [2021-12-06 20:42:03,386 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 277156 [2021-12-06 20:42:03,507 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 277156 [2021-12-06 20:42:03,507 INFO L73 IsDeterministic]: Start isDeterministic. Operand 425005 states and 782146 transitions. [2021-12-06 20:42:03,509 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:42:03,509 INFO L681 BuchiCegarLoop]: Abstraction has 425005 states and 782146 transitions. [2021-12-06 20:42:03,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425005 states and 782146 transitions. [2021-12-06 20:42:05,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425005 to 78314. [2021-12-06 20:42:05,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78314 states, 78314 states have (on average 1.8452639374824424) internal successors, (144510), 78313 states have internal predecessors, (144510), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:05,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78314 states to 78314 states and 144510 transitions. [2021-12-06 20:42:05,515 INFO L704 BuchiCegarLoop]: Abstraction has 78314 states and 144510 transitions. [2021-12-06 20:42:05,515 INFO L587 BuchiCegarLoop]: Abstraction has 78314 states and 144510 transitions. [2021-12-06 20:42:05,515 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-06 20:42:05,515 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78314 states and 144510 transitions. [2021-12-06 20:42:05,686 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 39894 [2021-12-06 20:42:05,687 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:42:05,687 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:42:05,688 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:05,688 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:05,688 INFO L791 eck$LassoCheckResult]: Stem: 1483794#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1483795#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1484483#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1484484#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1483038#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1483039#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1484827#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1485984#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1484243#L111 assume !(0 == getOrigin_~person#1); 1482177#L115 assume !(1 == getOrigin_~person#1); 1482178#L119 assume !(2 == getOrigin_~person#1); 1485929#L123 assume !(3 == getOrigin_~person#1); 1482946#L127 assume !(4 == getOrigin_~person#1); 1482947#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1485079#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1484268#L551 assume !(0 == initPersonOnFloor_~floor#1); 1484269#L578 assume 1 == initPersonOnFloor_~floor#1; 1484847#L579 assume !(0 == initPersonOnFloor_~person#1); 1483814#L582 assume !(1 == initPersonOnFloor_~person#1); 1483815#L585 assume !(2 == initPersonOnFloor_~person#1); 1484885#L588 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 1484944#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1483597#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1482649#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1482650#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1485715#L355-2 assume { :end_inline_callOnFloor } true; 1486188#L695 assume { :end_inline_initPersonOnFloor } true; 1486187#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1486183#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1486182#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1486181#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 1486178#L578-1 assume 1 == initPersonOnFloor_~floor#1; 1483939#L579-2 assume !(0 == initPersonOnFloor_~person#1); 1483940#L582-2 assume !(1 == initPersonOnFloor_~person#1); 1483516#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1482016#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1482517#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1482518#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1485827#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1485128#L355-5 assume { :end_inline_callOnFloor } true; 1485129#L695-1 assume { :end_inline_initPersonOnFloor } true; 1485731#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1485732#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1486146#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1486147#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1485025#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1485026#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 1486055#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1487264#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1487261#L2489 assume !(0 != timeShift_~tmp___9~2#1); 1487262#L2580 assume !(1 == ~doorState~0); 1512317#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1512316#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1512315#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1512314#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 1512312#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1512310#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 1512293#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 1512286#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1512275#L2277 assume !(1 == ~currentHeading~0); 1512276#L2287 assume !(0 == ~currentFloorID~0); 1485831#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1485832#L2293-1 assume { :end_inline_continueInDirection } true; 1521801#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1521800#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1521799#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1521796#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1521791#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1521780#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1486062#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1485408#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1485409#L1006-2 assume !false; 1522793#L1007 [2021-12-06 20:42:05,689 INFO L793 eck$LassoCheckResult]: Loop: 1522793#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1542496#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1542495#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1542493#L1014 assume 1 != cleanup_~tmp___0~0#1; 1540949#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1539164#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1539165#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1539161#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1537867#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1539154#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1539155#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1539150#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1527099#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1539147#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1539148#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1539143#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 1539144#L2341-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1539138#L275-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1539139#L302-31 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 1539127#L2310-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 1539126#L2322-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1539121#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1539122#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1538910#L2491-2 assume !(0 != ~persons_0~0); 1538898#L2491-3 assume !(0 != ~persons_1~0); 1538867#L2505-1 assume !(0 != ~persons_2~0); 1538838#L2519-1 assume !(0 != ~persons_3~0); 1538826#L2533-1 assume !(0 != ~persons_4~0); 1538820#L2547-1 assume !(0 != ~persons_5~0); 1538811#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1538809#L371-12 assume 0 == isPersonOnFloor_~floor#1; 1538713#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1538697#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1538695#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 1538693#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1538692#L371-14 assume 0 == isPersonOnFloor_~floor#1; 1538679#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1538650#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1538646#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1538645#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1538644#L371-16 assume 0 == isPersonOnFloor_~floor#1; 1538638#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1538603#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1538600#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1538595#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1538593#L371-18 assume 0 == isPersonOnFloor_~floor#1; 1538408#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1538402#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1538400#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1538398#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1538397#L371-20 assume 0 == isPersonOnFloor_~floor#1; 1538372#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1538361#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 1538357#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1538355#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1538354#L371-22 assume 0 == isPersonOnFloor_~floor#1; 1538335#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1538313#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 1538310#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1538308#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1538304#L310-26 assume !(0 == resetCallOnFloor_~floorID#1); 1538305#L313-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1542524#L322-41 assume { :end_inline_resetCallOnFloor } true; 1542523#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1542521#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1542517#L1651-5 assume { :end_inline_resetFloorButton } true; 1542516#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1542515#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1542514#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1542513#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1542512#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1542509#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1542500#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1542498#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1542497#L1006-2 assume !false; 1522793#L1007 [2021-12-06 20:42:05,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:05,689 INFO L85 PathProgramCache]: Analyzing trace with hash -413985271, now seen corresponding path program 2 times [2021-12-06 20:42:05,689 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:05,689 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1273278067] [2021-12-06 20:42:05,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:05,689 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:05,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:05,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:05,716 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:05,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1273278067] [2021-12-06 20:42:05,716 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1273278067] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:05,716 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:05,716 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:42:05,716 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968808004] [2021-12-06 20:42:05,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:05,717 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:42:05,717 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:05,717 INFO L85 PathProgramCache]: Analyzing trace with hash -1259482984, now seen corresponding path program 1 times [2021-12-06 20:42:05,717 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:05,717 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1302966257] [2021-12-06 20:42:05,717 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:05,717 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:05,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:05,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:05,739 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:05,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1302966257] [2021-12-06 20:42:05,739 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1302966257] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:05,739 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:05,739 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:05,739 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1341646503] [2021-12-06 20:42:05,739 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:05,740 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:42:05,740 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:05,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 20:42:05,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:42:05,740 INFO L87 Difference]: Start difference. First operand 78314 states and 144510 transitions. cyclomatic complexity: 66205 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:06,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:06,492 INFO L93 Difference]: Finished difference Result 156511 states and 288823 transitions. [2021-12-06 20:42:06,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:42:06,494 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 156511 states and 288823 transitions. [2021-12-06 20:42:07,169 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 79788 [2021-12-06 20:42:07,538 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 156511 states to 156511 states and 288823 transitions. [2021-12-06 20:42:07,538 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104735 [2021-12-06 20:42:07,722 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104735 [2021-12-06 20:42:07,722 INFO L73 IsDeterministic]: Start isDeterministic. Operand 156511 states and 288823 transitions. [2021-12-06 20:42:07,725 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:42:07,725 INFO L681 BuchiCegarLoop]: Abstraction has 156511 states and 288823 transitions. [2021-12-06 20:42:07,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156511 states and 288823 transitions. [2021-12-06 20:42:08,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156511 to 78314. [2021-12-06 20:42:08,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78314 states, 78314 states have (on average 1.845123477283755) internal successors, (144499), 78313 states have internal predecessors, (144499), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:08,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78314 states to 78314 states and 144499 transitions. [2021-12-06 20:42:08,775 INFO L704 BuchiCegarLoop]: Abstraction has 78314 states and 144499 transitions. [2021-12-06 20:42:08,775 INFO L587 BuchiCegarLoop]: Abstraction has 78314 states and 144499 transitions. [2021-12-06 20:42:08,775 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-06 20:42:08,775 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78314 states and 144499 transitions. [2021-12-06 20:42:08,908 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 39894 [2021-12-06 20:42:08,908 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:42:08,908 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:42:08,909 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:08,909 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:08,910 INFO L791 eck$LassoCheckResult]: Stem: 1718625#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1718626#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1719300#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1719301#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1717864#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1717865#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1719644#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1720761#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1719066#L111 assume !(0 == getOrigin_~person#1); 1717013#L115 assume !(1 == getOrigin_~person#1); 1717014#L119 assume !(2 == getOrigin_~person#1); 1720708#L123 assume !(3 == getOrigin_~person#1); 1717772#L127 assume !(4 == getOrigin_~person#1); 1717773#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1719889#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1719092#L551 assume !(0 == initPersonOnFloor_~floor#1); 1719093#L578 assume 1 == initPersonOnFloor_~floor#1; 1719664#L579 assume !(0 == initPersonOnFloor_~person#1); 1718647#L582 assume !(1 == initPersonOnFloor_~person#1); 1718648#L585 assume !(2 == initPersonOnFloor_~person#1); 1719702#L588 assume !(3 == initPersonOnFloor_~person#1); 1720334#L591 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1719761#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1718429#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1717480#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1717481#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1720501#L355-2 assume { :end_inline_callOnFloor } true; 1720939#L695 assume { :end_inline_initPersonOnFloor } true; 1720938#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1720935#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1720934#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1720932#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 1720931#L578-1 assume 1 == initPersonOnFloor_~floor#1; 1718768#L579-2 assume !(0 == initPersonOnFloor_~person#1); 1718769#L582-2 assume !(1 == initPersonOnFloor_~person#1); 1720922#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1720654#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1720655#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1720547#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1720548#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1716916#L355-5 assume { :end_inline_callOnFloor } true; 1719776#L695-1 assume { :end_inline_initPersonOnFloor } true; 1719777#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1720835#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1720836#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1717588#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1717589#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1719838#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 1720818#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1720843#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1741928#L2489 assume !(0 != timeShift_~tmp___9~2#1); 1717817#L2580 assume !(1 == ~doorState~0); 1717819#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1743568#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1743566#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1743565#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 1743563#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1743519#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 1743518#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 1743516#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1743517#L2277 assume !(1 == ~currentHeading~0); 1720619#L2287 assume !(0 == ~currentFloorID~0); 1720620#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1720844#L2293-1 assume { :end_inline_continueInDirection } true; 1717127#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1717128#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1718328#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1720416#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1720417#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1720825#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1717243#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1720204#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1720205#L1006-2 assume !false; 1752855#L1007 [2021-12-06 20:42:08,910 INFO L793 eck$LassoCheckResult]: Loop: 1752855#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1786584#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1786582#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1786580#L1014 assume 1 != cleanup_~tmp___0~0#1; 1786578#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1786576#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1786574#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1786572#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1771004#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1786570#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1786568#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1786566#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1756041#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1786564#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1786562#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1786560#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 1786558#L2341-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1786556#L275-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1786554#L302-31 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 1786551#L2310-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 1786546#L2322-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1786544#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1786539#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1786532#L2491-2 assume !(0 != ~persons_0~0); 1786526#L2491-3 assume !(0 != ~persons_1~0); 1786521#L2505-1 assume !(0 != ~persons_2~0); 1786511#L2519-1 assume !(0 != ~persons_3~0); 1786505#L2533-1 assume !(0 != ~persons_4~0); 1786500#L2547-1 assume !(0 != ~persons_5~0); 1786496#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1786495#L371-12 assume 0 == isPersonOnFloor_~floor#1; 1786386#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1786370#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1786368#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 1786366#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1786365#L371-14 assume 0 == isPersonOnFloor_~floor#1; 1786352#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1786329#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1786327#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1786328#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1788418#L371-16 assume 0 == isPersonOnFloor_~floor#1; 1788412#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1788383#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1788381#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1788382#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1790514#L371-18 assume 0 == isPersonOnFloor_~floor#1; 1790450#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1790003#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1789120#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1786025#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1786017#L371-20 assume 0 == isPersonOnFloor_~floor#1; 1785227#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1785215#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 1785182#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1785179#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1785174#L371-22 assume 0 == isPersonOnFloor_~floor#1; 1785150#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1785133#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 1785131#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1785129#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1784975#L310-26 assume !(0 == resetCallOnFloor_~floorID#1); 1784976#L313-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1786629#L322-41 assume { :end_inline_resetCallOnFloor } true; 1786628#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1786626#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1786622#L1651-5 assume { :end_inline_resetFloorButton } true; 1786621#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1786620#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1786619#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1786613#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1786611#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1786608#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1786590#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1786588#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1786586#L1006-2 assume !false; 1752855#L1007 [2021-12-06 20:42:08,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:08,910 INFO L85 PathProgramCache]: Analyzing trace with hash -1732357020, now seen corresponding path program 1 times [2021-12-06 20:42:08,910 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:08,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1292206151] [2021-12-06 20:42:08,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:08,910 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:08,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:08,941 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:08,942 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:08,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1292206151] [2021-12-06 20:42:08,942 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1292206151] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:08,942 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:08,942 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:42:08,942 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1269770971] [2021-12-06 20:42:08,942 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:08,942 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:42:08,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:08,943 INFO L85 PathProgramCache]: Analyzing trace with hash -1259482984, now seen corresponding path program 2 times [2021-12-06 20:42:08,943 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:08,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616652745] [2021-12-06 20:42:08,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:08,943 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:08,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:08,963 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:08,963 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:08,963 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616652745] [2021-12-06 20:42:08,963 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616652745] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:08,963 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:08,963 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:08,963 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1835511307] [2021-12-06 20:42:08,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:08,964 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:42:08,964 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:08,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 20:42:08,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:42:08,964 INFO L87 Difference]: Start difference. First operand 78314 states and 144499 transitions. cyclomatic complexity: 66194 Second operand has 4 states, 4 states have (on average 18.25) internal successors, (73), 4 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:09,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:09,431 INFO L93 Difference]: Finished difference Result 156511 states and 288810 transitions. [2021-12-06 20:42:09,432 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:42:09,432 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 156511 states and 288810 transitions. [2021-12-06 20:42:10,147 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 79788 [2021-12-06 20:42:10,560 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 156511 states to 156511 states and 288810 transitions. [2021-12-06 20:42:10,560 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104735 [2021-12-06 20:42:10,628 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104735 [2021-12-06 20:42:10,628 INFO L73 IsDeterministic]: Start isDeterministic. Operand 156511 states and 288810 transitions. [2021-12-06 20:42:10,628 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:42:10,628 INFO L681 BuchiCegarLoop]: Abstraction has 156511 states and 288810 transitions. [2021-12-06 20:42:10,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156511 states and 288810 transitions. [2021-12-06 20:42:11,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156511 to 78314. [2021-12-06 20:42:11,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78314 states, 78314 states have (on average 1.8449830170850678) internal successors, (144488), 78313 states have internal predecessors, (144488), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:11,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78314 states to 78314 states and 144488 transitions. [2021-12-06 20:42:11,852 INFO L704 BuchiCegarLoop]: Abstraction has 78314 states and 144488 transitions. [2021-12-06 20:42:11,852 INFO L587 BuchiCegarLoop]: Abstraction has 78314 states and 144488 transitions. [2021-12-06 20:42:11,852 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-06 20:42:11,852 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78314 states and 144488 transitions. [2021-12-06 20:42:11,987 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 39894 [2021-12-06 20:42:11,988 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:42:11,988 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:42:11,989 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:11,989 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:11,989 INFO L791 eck$LassoCheckResult]: Stem: 1953459#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1953460#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1954137#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1954138#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1952707#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1952708#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1954492#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1955668#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1953896#L111 assume !(0 == getOrigin_~person#1); 1951849#L115 assume !(1 == getOrigin_~person#1); 1951850#L119 assume !(2 == getOrigin_~person#1); 1955609#L123 assume !(3 == getOrigin_~person#1); 1952615#L127 assume !(4 == getOrigin_~person#1); 1952616#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1954739#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1953922#L551 assume !(0 == initPersonOnFloor_~floor#1); 1953923#L578 assume 1 == initPersonOnFloor_~floor#1; 1954512#L579 assume !(0 == initPersonOnFloor_~person#1); 1953478#L582 assume !(1 == initPersonOnFloor_~person#1); 1953479#L585 assume !(2 == initPersonOnFloor_~person#1); 1954553#L588 assume !(3 == initPersonOnFloor_~person#1); 1955215#L591 assume !(4 == initPersonOnFloor_~person#1); 1954611#L594 assume !(5 == initPersonOnFloor_~person#1); 1954612#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1953264#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1952320#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1952321#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1952924#L355-2 assume { :end_inline_callOnFloor } true; 1952925#L695 assume { :end_inline_initPersonOnFloor } true; 1954425#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1955554#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1952837#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1955814#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 1955813#L578-1 assume 1 == initPersonOnFloor_~floor#1; 1953600#L579-2 assume !(0 == initPersonOnFloor_~person#1); 1953601#L582-2 assume !(1 == initPersonOnFloor_~person#1); 1955840#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1955547#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1955548#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1955434#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1955435#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1951749#L355-5 assume { :end_inline_callOnFloor } true; 1954627#L695-1 assume { :end_inline_initPersonOnFloor } true; 1954628#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1955750#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1955751#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1952430#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 1952431#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1954688#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 1955739#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1955759#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1953939#L2489 assume !(0 != timeShift_~tmp___9~2#1); 1953941#L2580 assume !(1 == ~doorState~0); 1956094#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1971888#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1971887#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 1971885#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 1971882#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1971838#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 1971837#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 1971831#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1954972#L2277 assume !(1 == ~currentHeading~0); 1954973#L2287 assume !(0 == ~currentFloorID~0); 1953885#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1973119#L2293-1 assume { :end_inline_continueInDirection } true; 1979896#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1979895#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 1979894#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1979892#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1979893#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 1979862#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1979860#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1979858#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1979856#L1006-2 assume !false; 1979857#L1007 [2021-12-06 20:42:11,989 INFO L793 eck$LassoCheckResult]: Loop: 1979857#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2027497#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2027495#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2027494#L1014 assume 1 != cleanup_~tmp___0~0#1; 2027492#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2027468#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2027464#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2027462#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2007288#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2027325#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2027220#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2027203#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1989578#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2027172#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 2027166#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2025663#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2023880#L2341-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2022694#L275-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2020659#L302-31 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 2019400#L2310-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 2019397#L2322-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2019395#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 2019393#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2019389#L2491-2 assume !(0 != ~persons_0~0); 2019120#L2491-3 assume !(0 != ~persons_1~0); 2009656#L2505-1 assume !(0 != ~persons_2~0); 2009646#L2519-1 assume !(0 != ~persons_3~0); 2009640#L2533-1 assume !(0 != ~persons_4~0); 2009635#L2547-1 assume !(0 != ~persons_5~0); 2009631#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2009630#L371-12 assume 0 == isPersonOnFloor_~floor#1; 2009536#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2009521#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 2009519#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 2009520#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2011356#L371-14 assume 0 == isPersonOnFloor_~floor#1; 2011347#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2011318#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 2011314#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 2011313#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2011311#L371-16 assume 0 == isPersonOnFloor_~floor#1; 2009825#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2009795#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 2009793#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 2009791#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2009790#L371-18 assume 0 == isPersonOnFloor_~floor#1; 2009602#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2009596#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 2009593#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2009594#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2016964#L371-20 assume 0 == isPersonOnFloor_~floor#1; 2016939#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2016928#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 2016926#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2016927#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2018384#L371-22 assume 0 == isPersonOnFloor_~floor#1; 2018366#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2018350#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 2008601#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2007685#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2007631#L310-26 assume !(0 == resetCallOnFloor_~floorID#1); 2007632#L313-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 2027569#L322-41 assume { :end_inline_resetCallOnFloor } true; 2027568#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2027566#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2027562#L1651-5 assume { :end_inline_resetFloorButton } true; 2027561#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2027560#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2027559#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2027557#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2027554#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 2027548#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2027538#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2027500#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2027499#L1006-2 assume !false; 1979857#L1007 [2021-12-06 20:42:11,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:11,990 INFO L85 PathProgramCache]: Analyzing trace with hash 1437014530, now seen corresponding path program 1 times [2021-12-06 20:42:11,990 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:11,990 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119693098] [2021-12-06 20:42:11,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:11,990 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:12,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:12,017 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:12,017 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:12,017 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1119693098] [2021-12-06 20:42:12,017 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1119693098] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:12,017 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:12,017 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:42:12,018 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579574897] [2021-12-06 20:42:12,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:12,018 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:42:12,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:12,018 INFO L85 PathProgramCache]: Analyzing trace with hash -1259482984, now seen corresponding path program 3 times [2021-12-06 20:42:12,018 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:12,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1813112812] [2021-12-06 20:42:12,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:12,019 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:12,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:12,045 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:12,045 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:12,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1813112812] [2021-12-06 20:42:12,046 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1813112812] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:12,046 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:12,046 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:12,046 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1771485681] [2021-12-06 20:42:12,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:12,046 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:42:12,046 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:12,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 20:42:12,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:42:12,047 INFO L87 Difference]: Start difference. First operand 78314 states and 144488 transitions. cyclomatic complexity: 66183 Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:12,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:12,479 INFO L93 Difference]: Finished difference Result 156493 states and 288787 transitions. [2021-12-06 20:42:12,479 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 20:42:12,480 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 156493 states and 288787 transitions. [2021-12-06 20:42:13,108 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 79788 [2021-12-06 20:42:13,466 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 156493 states to 156493 states and 288787 transitions. [2021-12-06 20:42:13,466 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104717 [2021-12-06 20:42:13,526 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104717 [2021-12-06 20:42:13,526 INFO L73 IsDeterministic]: Start isDeterministic. Operand 156493 states and 288787 transitions. [2021-12-06 20:42:13,537 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:42:13,537 INFO L681 BuchiCegarLoop]: Abstraction has 156493 states and 288787 transitions. [2021-12-06 20:42:13,600 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156493 states and 288787 transitions. [2021-12-06 20:42:14,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156493 to 78314. [2021-12-06 20:42:14,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78314 states, 78314 states have (on average 1.8449702479760963) internal successors, (144487), 78313 states have internal predecessors, (144487), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:14,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78314 states to 78314 states and 144487 transitions. [2021-12-06 20:42:14,752 INFO L704 BuchiCegarLoop]: Abstraction has 78314 states and 144487 transitions. [2021-12-06 20:42:14,752 INFO L587 BuchiCegarLoop]: Abstraction has 78314 states and 144487 transitions. [2021-12-06 20:42:14,752 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-06 20:42:14,752 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78314 states and 144487 transitions. [2021-12-06 20:42:15,082 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 39894 [2021-12-06 20:42:15,082 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:42:15,082 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:42:15,083 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:15,083 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:15,083 INFO L791 eck$LassoCheckResult]: Stem: 2188271#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2188272#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2188946#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2188947#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2187523#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2187524#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2189291#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2190434#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2188704#L111 assume !(0 == getOrigin_~person#1); 2186666#L115 assume !(1 == getOrigin_~person#1); 2186667#L119 assume !(2 == getOrigin_~person#1); 2190383#L123 assume !(3 == getOrigin_~person#1); 2187431#L127 assume !(4 == getOrigin_~person#1); 2187432#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2189535#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2188729#L551 assume !(0 == initPersonOnFloor_~floor#1); 2188730#L578 assume 1 == initPersonOnFloor_~floor#1; 2189311#L579 assume !(0 == initPersonOnFloor_~person#1); 2188290#L582 assume !(1 == initPersonOnFloor_~person#1); 2188291#L585 assume !(2 == initPersonOnFloor_~person#1); 2189353#L588 assume !(3 == initPersonOnFloor_~person#1); 2190006#L591 assume !(4 == initPersonOnFloor_~person#1); 2189406#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2189407#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2188079#L1282 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2187137#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2187138#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2190186#L355-2 assume { :end_inline_callOnFloor } true; 2190615#L695 assume { :end_inline_initPersonOnFloor } true; 2190614#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2190613#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2190611#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2190603#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 2190602#L578-1 assume 1 == initPersonOnFloor_~floor#1; 2189315#L579-2 assume !(0 == initPersonOnFloor_~person#1); 2189286#L582-2 assume !(1 == initPersonOnFloor_~person#1); 2189287#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 2190334#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2190335#L1282-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2190231#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2190232#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2186565#L355-5 assume { :end_inline_callOnFloor } true; 2189422#L695-1 assume { :end_inline_initPersonOnFloor } true; 2189423#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2190513#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2190514#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2187246#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 2187247#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2189481#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2190500#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2190520#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 2188744#L2489 assume !(0 != timeShift_~tmp___9~2#1); 2188746#L2580 assume !(1 == ~doorState~0); 2190810#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2208462#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2208461#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2208459#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 2208456#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2208420#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 2207693#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 2206527#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 2206528#L2277 assume !(1 == ~currentHeading~0); 2206741#L2287 assume !(0 == ~currentFloorID~0); 2206737#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2206733#L2293-1 assume { :end_inline_continueInDirection } true; 2216943#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2216942#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2216941#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2216939#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2216940#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 2216917#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2216916#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2216915#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2216899#L1006-2 assume !false; 2216900#L1007 [2021-12-06 20:42:15,083 INFO L793 eck$LassoCheckResult]: Loop: 2216900#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2244288#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2244287#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2244286#L1014 assume 1 != cleanup_~tmp___0~0#1; 2244281#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2244279#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2244278#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2244276#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2243467#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2244273#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2244271#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2244269#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2225054#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2244267#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 2244265#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2244263#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2244260#L2341-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2244258#L275-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2244256#L302-31 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 2244251#L2310-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 2244248#L2322-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2244246#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 2244244#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2244236#L2491-2 assume !(0 != ~persons_0~0); 2244230#L2491-3 assume !(0 != ~persons_1~0); 2244225#L2505-1 assume !(0 != ~persons_2~0); 2244215#L2519-1 assume !(0 != ~persons_3~0); 2244209#L2533-1 assume !(0 != ~persons_4~0); 2244204#L2547-1 assume !(0 != ~persons_5~0); 2244200#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2244199#L371-12 assume 0 == isPersonOnFloor_~floor#1; 2243886#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2243870#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 2243868#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 2243866#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2243865#L371-14 assume 0 == isPersonOnFloor_~floor#1; 2243782#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2243753#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 2243749#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 2243748#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2243747#L371-16 assume 0 == isPersonOnFloor_~floor#1; 2243740#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2243711#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 2243709#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 2243707#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2243706#L371-18 assume 0 == isPersonOnFloor_~floor#1; 2243669#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2243663#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 2243661#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2243659#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2243658#L371-20 assume 0 == isPersonOnFloor_~floor#1; 2243627#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2243615#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 2243613#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2243605#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2243603#L371-22 assume 0 == isPersonOnFloor_~floor#1; 2243572#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2243555#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 2243553#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2243551#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2243498#L310-26 assume !(0 == resetCallOnFloor_~floorID#1); 2243499#L313-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 2244326#L322-41 assume { :end_inline_resetCallOnFloor } true; 2244325#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2244323#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2244319#L1651-5 assume { :end_inline_resetFloorButton } true; 2244318#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2244317#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2244316#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2244309#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2244308#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 2244305#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2244292#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2244290#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2244289#L1006-2 assume !false; 2216900#L1007 [2021-12-06 20:42:15,084 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:15,084 INFO L85 PathProgramCache]: Analyzing trace with hash -101325500, now seen corresponding path program 1 times [2021-12-06 20:42:15,084 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:15,084 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058141737] [2021-12-06 20:42:15,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:15,084 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:15,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:15,125 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:15,125 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:15,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058141737] [2021-12-06 20:42:15,125 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058141737] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:15,125 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:15,125 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:42:15,125 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1132020995] [2021-12-06 20:42:15,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:15,126 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:42:15,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:15,126 INFO L85 PathProgramCache]: Analyzing trace with hash -1259482984, now seen corresponding path program 4 times [2021-12-06 20:42:15,126 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:15,126 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2034645069] [2021-12-06 20:42:15,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:15,127 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:15,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:15,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:15,151 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:15,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2034645069] [2021-12-06 20:42:15,151 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2034645069] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:15,151 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:15,151 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:15,151 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [164035469] [2021-12-06 20:42:15,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:15,152 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:42:15,152 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:15,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 20:42:15,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:42:15,152 INFO L87 Difference]: Start difference. First operand 78314 states and 144487 transitions. cyclomatic complexity: 66182 Second operand has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 7 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:16,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:16,293 INFO L93 Difference]: Finished difference Result 312895 states and 577440 transitions. [2021-12-06 20:42:16,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 20:42:16,295 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 312895 states and 577440 transitions. [2021-12-06 20:42:17,467 INFO L131 ngComponentsAnalysis]: Automaton has 28 accepting balls. 159576 [2021-12-06 20:42:18,402 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 312895 states to 312895 states and 577440 transitions. [2021-12-06 20:42:18,402 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 209343 [2021-12-06 20:42:18,535 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 209343 [2021-12-06 20:42:18,535 INFO L73 IsDeterministic]: Start isDeterministic. Operand 312895 states and 577440 transitions. [2021-12-06 20:42:18,541 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:42:18,541 INFO L681 BuchiCegarLoop]: Abstraction has 312895 states and 577440 transitions. [2021-12-06 20:42:18,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312895 states and 577440 transitions. [2021-12-06 20:42:20,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312895 to 78318. [2021-12-06 20:42:20,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78318 states, 78318 states have (on average 1.844914323654843) internal successors, (144490), 78317 states have internal predecessors, (144490), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:20,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78318 states to 78318 states and 144490 transitions. [2021-12-06 20:42:20,226 INFO L704 BuchiCegarLoop]: Abstraction has 78318 states and 144490 transitions. [2021-12-06 20:42:20,226 INFO L587 BuchiCegarLoop]: Abstraction has 78318 states and 144490 transitions. [2021-12-06 20:42:20,226 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-06 20:42:20,226 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78318 states and 144490 transitions. [2021-12-06 20:42:20,397 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 39894 [2021-12-06 20:42:20,397 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:42:20,397 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:42:20,399 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:20,399 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:20,399 INFO L791 eck$LassoCheckResult]: Stem: 2579503#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2579504#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2580187#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2580188#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2578755#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2578756#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2580543#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2581716#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2579941#L111 assume !(0 == getOrigin_~person#1); 2577900#L115 assume !(1 == getOrigin_~person#1); 2577901#L119 assume !(2 == getOrigin_~person#1); 2581662#L123 assume !(3 == getOrigin_~person#1); 2578663#L127 assume !(4 == getOrigin_~person#1); 2578664#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2580802#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2579969#L551 assume !(0 == initPersonOnFloor_~floor#1); 2579970#L578 assume 1 == initPersonOnFloor_~floor#1; 2580563#L579 assume !(0 == initPersonOnFloor_~person#1); 2579522#L582 assume !(1 == initPersonOnFloor_~person#1); 2579523#L585 assume !(2 == initPersonOnFloor_~person#1); 2580602#L588 assume !(3 == initPersonOnFloor_~person#1); 2581274#L591 assume !(4 == initPersonOnFloor_~person#1); 2580663#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2580664#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2579309#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2579310#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2578371#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2578372#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2581452#L355-2 assume { :end_inline_callOnFloor } true; 2580472#L695 assume { :end_inline_initPersonOnFloor } true; 2580473#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2581615#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2579960#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2581875#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 2581869#L578-1 assume 1 == initPersonOnFloor_~floor#1; 2580565#L579-2 assume !(0 == initPersonOnFloor_~person#1); 2580538#L582-2 assume !(1 == initPersonOnFloor_~person#1); 2580539#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 2581609#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2581610#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2581895#L1285-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2581493#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2581494#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2577800#L355-5 assume { :end_inline_callOnFloor } true; 2580684#L695-1 assume { :end_inline_initPersonOnFloor } true; 2580685#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2581803#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2581804#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2578479#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 2578480#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2580747#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2597929#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2582125#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 2579984#L2489 assume !(0 != timeShift_~tmp___9~2#1); 2579986#L2580 assume !(1 == ~doorState~0); 2582122#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2598791#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2598790#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2598789#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 2598788#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2598702#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 2598700#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 2598697#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 2598698#L2277 assume !(1 == ~currentHeading~0); 2599003#L2287 assume !(0 == ~currentFloorID~0); 2598650#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2598646#L2293-1 assume { :end_inline_continueInDirection } true; 2612361#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2612353#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2612347#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2612346#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2612345#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 2580721#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2578135#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2581140#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2581141#L1006-2 assume !false; 2611465#L1007 [2021-12-06 20:42:20,399 INFO L793 eck$LassoCheckResult]: Loop: 2611465#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2649001#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2648993#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2648990#L1014 assume 1 != cleanup_~tmp___0~0#1; 2648988#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2648971#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2648970#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2648969#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2631893#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2648968#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2648967#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2648966#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2616704#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2648961#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 2648960#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2648959#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2648954#L2341-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2648953#L275-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2648942#L302-31 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 2648552#L2310-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 2631849#L2322-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2631847#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 2631842#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2631844#L2491-2 assume !(0 != ~persons_0~0); 2649521#L2491-3 assume !(0 != ~persons_1~0); 2649516#L2505-1 assume !(0 != ~persons_2~0); 2649506#L2519-1 assume !(0 != ~persons_3~0); 2649500#L2533-1 assume !(0 != ~persons_4~0); 2649495#L2547-1 assume !(0 != ~persons_5~0); 2649491#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2649490#L371-12 assume 0 == isPersonOnFloor_~floor#1; 2649400#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2649384#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 2649382#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 2649380#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2649379#L371-14 assume 0 == isPersonOnFloor_~floor#1; 2649366#L372-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2649337#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 2649333#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 2649327#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2649325#L371-16 assume 0 == isPersonOnFloor_~floor#1; 2649306#L372-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2649276#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 2649274#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 2649272#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2649271#L371-18 assume 0 == isPersonOnFloor_~floor#1; 2649240#L372-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2649230#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 2649227#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2649225#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2649224#L371-20 assume 0 == isPersonOnFloor_~floor#1; 2649186#L372-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2649174#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 2649172#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2649170#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2649169#L371-22 assume 0 == isPersonOnFloor_~floor#1; 2649143#L372-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2649126#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 2649123#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2649121#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2649119#L310-26 assume !(0 == resetCallOnFloor_~floorID#1); 2649113#L313-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 2649108#L322-41 assume { :end_inline_resetCallOnFloor } true; 2649106#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2649101#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2649096#L1651-5 assume { :end_inline_resetFloorButton } true; 2649095#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2649094#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2649082#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2649080#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2649081#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 2649063#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2649053#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2649020#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2649017#L1006-2 assume !false; 2611465#L1007 [2021-12-06 20:42:20,400 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:20,400 INFO L85 PathProgramCache]: Analyzing trace with hash 569560352, now seen corresponding path program 1 times [2021-12-06 20:42:20,400 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:20,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1893276525] [2021-12-06 20:42:20,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:20,401 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:20,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:20,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:20,439 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:20,439 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1893276525] [2021-12-06 20:42:20,440 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1893276525] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:20,440 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:20,440 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:42:20,440 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551080663] [2021-12-06 20:42:20,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:20,440 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:42:20,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:20,440 INFO L85 PathProgramCache]: Analyzing trace with hash -1259482984, now seen corresponding path program 5 times [2021-12-06 20:42:20,441 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:20,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597718286] [2021-12-06 20:42:20,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:20,441 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:20,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:20,461 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:20,461 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:20,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597718286] [2021-12-06 20:42:20,461 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597718286] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:20,461 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:20,461 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:20,461 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [474035851] [2021-12-06 20:42:20,461 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:20,462 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:42:20,462 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:20,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:42:20,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:42:20,462 INFO L87 Difference]: Start difference. First operand 78318 states and 144490 transitions. cyclomatic complexity: 66181 Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 5 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:21,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:21,440 INFO L93 Difference]: Finished difference Result 118540 states and 215928 transitions. [2021-12-06 20:42:21,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 20:42:21,441 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 118540 states and 215928 transitions. [2021-12-06 20:42:21,827 INFO L131 ngComponentsAnalysis]: Automaton has 23 accepting balls. 56472 [2021-12-06 20:42:22,130 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 118540 states to 118540 states and 215928 transitions. [2021-12-06 20:42:22,131 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 77854 [2021-12-06 20:42:22,178 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 77854 [2021-12-06 20:42:22,179 INFO L73 IsDeterministic]: Start isDeterministic. Operand 118540 states and 215928 transitions. [2021-12-06 20:42:22,180 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:42:22,180 INFO L681 BuchiCegarLoop]: Abstraction has 118540 states and 215928 transitions. [2021-12-06 20:42:22,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118540 states and 215928 transitions. [2021-12-06 20:42:23,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118540 to 78318. [2021-12-06 20:42:23,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78318 states, 78318 states have (on average 1.8276769069690237) internal successors, (143140), 78317 states have internal predecessors, (143140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:23,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78318 states to 78318 states and 143140 transitions. [2021-12-06 20:42:23,416 INFO L704 BuchiCegarLoop]: Abstraction has 78318 states and 143140 transitions. [2021-12-06 20:42:23,416 INFO L587 BuchiCegarLoop]: Abstraction has 78318 states and 143140 transitions. [2021-12-06 20:42:23,416 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-12-06 20:42:23,416 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78318 states and 143140 transitions. [2021-12-06 20:42:23,575 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 39894 [2021-12-06 20:42:23,575 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:42:23,575 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:42:23,576 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:23,577 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:23,577 INFO L791 eck$LassoCheckResult]: Stem: 2776416#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2776417#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2777120#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2777121#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2775646#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2775647#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2777497#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2778808#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2776874#L111 assume !(0 == getOrigin_~person#1); 2774779#L115 assume !(1 == getOrigin_~person#1); 2774780#L119 assume !(2 == getOrigin_~person#1); 2778738#L123 assume !(3 == getOrigin_~person#1); 2775553#L127 assume !(4 == getOrigin_~person#1); 2775554#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2777766#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2776899#L551 assume !(0 == initPersonOnFloor_~floor#1); 2776900#L578 assume 1 == initPersonOnFloor_~floor#1; 2777519#L579 assume !(0 == initPersonOnFloor_~person#1); 2776437#L582 assume !(1 == initPersonOnFloor_~person#1); 2776438#L585 assume !(2 == initPersonOnFloor_~person#1); 2777562#L588 assume !(3 == initPersonOnFloor_~person#1); 2778287#L591 assume !(4 == initPersonOnFloor_~person#1); 2777624#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2777625#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2776220#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2776221#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2775254#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2775255#L343 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2778491#L355-2 assume { :end_inline_callOnFloor } true; 2779046#L695 assume { :end_inline_initPersonOnFloor } true; 2779045#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2779044#L111-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2775314#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2775315#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 2777178#L578-1 assume 1 == initPersonOnFloor_~floor#1; 2776564#L579-2 assume !(0 == initPersonOnFloor_~person#1); 2776565#L582-2 assume !(1 == initPersonOnFloor_~person#1); 2776135#L585-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 2776136#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2775119#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2775120#L1285-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2778540#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2778541#L343-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2774677#L355-5 assume { :end_inline_callOnFloor } true; 2777646#L695-1 assume { :end_inline_initPersonOnFloor } true; 2777647#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2778900#L275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2778901#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2775364#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 2775365#L2337 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2777711#L1668 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2794389#L2341 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~22#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2794388#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 2794387#L2489 assume !(0 != timeShift_~tmp___9~2#1); 2794386#L2580 assume !(1 == ~doorState~0); 2780026#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2780027#L275-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2780023#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2779305#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 2779306#L2220 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2779386#L1668-1 stopRequestedInDirection_#t~ret45#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret45#1;havoc stopRequestedInDirection_#t~ret45#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~15#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~19#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 2779387#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 2779379#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 2779381#L2277 assume !(1 == ~currentHeading~0); 2778624#L2287 assume !(0 == ~currentFloorID~0); 2778625#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2778926#L2293-1 assume { :end_inline_continueInDirection } true; 2775262#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2808773#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2808772#L1320 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2808771#L1321 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2808770#L1677 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 2779610#L1325 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2778886#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2778887#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2810849#L1006-2 assume !false; 2774845#L1007 [2021-12-06 20:42:23,577 INFO L793 eck$LassoCheckResult]: Loop: 2774845#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2777730#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2777731#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2850546#L1014 assume 1 != cleanup_~tmp___0~0#1; 2850545#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2850544#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2850543#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2850529#L1776 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2835439#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2850522#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2850521#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2850520#L275-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2815809#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 2850519#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 2850518#L2337-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2850517#L1668-4 stopRequestedAtCurrentFloor_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1; 2850515#L2341-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2850510#L275-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2850508#L302-31 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 2850506#L2310-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 2850504#L2322-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 2850503#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 2850502#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2841070#L2491-2 assume !(0 != ~persons_0~0); 2840972#L2491-3 assume !(0 != ~persons_1~0); 2840962#L2505-1 assume !(0 != ~persons_2~0); 2840956#L2519-1 assume !(0 != ~persons_3~0); 2840951#L2533-1 assume !(0 != ~persons_4~0); 2840939#L2547-1 assume !(0 != ~persons_5~0); 2837262#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2837261#L371-12 assume 0 == isPersonOnFloor_~floor#1; 2837138#L372-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2837123#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 2837117#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 2837108#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2835860#L371-14 assume 0 == isPersonOnFloor_~floor#1; 2835859#L372-7 assume !(0 == isPersonOnFloor_~person#1); 2835853#L376-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2835826#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 2835822#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 2835821#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2835820#L371-16 assume 0 == isPersonOnFloor_~floor#1; 2835811#L372-8 assume !(0 == isPersonOnFloor_~person#1); 2835804#L376-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2835777#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 2835775#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 2835773#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2835771#L371-18 assume 0 == isPersonOnFloor_~floor#1; 2835772#L372-9 assume !(0 == isPersonOnFloor_~person#1); 2835713#L376-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2835707#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 2835705#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2835703#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2835701#L371-20 assume 0 == isPersonOnFloor_~floor#1; 2835702#L372-10 assume !(0 == isPersonOnFloor_~person#1); 2835677#L376-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2835666#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 2835665#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2835664#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2835663#L371-22 assume 0 == isPersonOnFloor_~floor#1; 2835236#L372-11 assume !(0 == isPersonOnFloor_~person#1); 2835237#L376-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2835195#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 2835196#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2835485#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2835484#L310-26 assume !(0 == resetCallOnFloor_~floorID#1); 2775673#L313-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 2775675#L322-41 assume { :end_inline_resetCallOnFloor } true; 2777109#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2777110#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2778006#L1651-5 assume { :end_inline_resetFloorButton } true; 2777532#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2777533#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 2777982#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2777983#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2775038#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 2775039#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2775845#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2775852#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2774844#L1006-2 assume !false; 2774845#L1007 WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [2021-12-06 20:43:11,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:11,432 INFO L85 PathProgramCache]: Analyzing trace with hash 372927258, now seen corresponding path program 1 times [2021-12-06 20:43:11,432 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:11,432 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [168776301] [2021-12-06 20:43:11,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:11,433 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:11,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:11,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:11,462 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:11,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [168776301] [2021-12-06 20:43:11,462 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [168776301] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:11,462 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:11,462 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:43:11,463 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1616384645] [2021-12-06 20:43:11,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:11,463 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:43:11,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:11,463 INFO L85 PathProgramCache]: Analyzing trace with hash 282868877, now seen corresponding path program 1 times [2021-12-06 20:43:11,463 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:11,463 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437083859] [2021-12-06 20:43:11,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:11,463 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:11,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:11,491 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-06 20:43:11,491 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:11,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437083859] [2021-12-06 20:43:11,491 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [437083859] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:11,491 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:11,491 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:43:11,491 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238151344] [2021-12-06 20:43:11,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:11,492 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:11,492 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:11,492 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:43:11,492 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:43:11,492 INFO L87 Difference]: Start difference. First operand 17608 states and 29673 transitions. cyclomatic complexity: 12070 Second operand has 5 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:11,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:11,754 INFO L93 Difference]: Finished difference Result 57737 states and 97580 transitions. [2021-12-06 20:43:11,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 20:43:11,755 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57737 states and 97580 transitions. [2021-12-06 20:43:11,941 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 33121 [2021-12-06 20:43:12,085 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57737 states to 57737 states and 97580 transitions. [2021-12-06 20:43:12,085 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37503 [2021-12-06 20:43:12,108 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37503 [2021-12-06 20:43:12,108 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57737 states and 97580 transitions. [2021-12-06 20:43:12,109 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:12,109 INFO L681 BuchiCegarLoop]: Abstraction has 57737 states and 97580 transitions. [2021-12-06 20:43:12,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57737 states and 97580 transitions. [2021-12-06 20:43:12,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57737 to 17608. [2021-12-06 20:43:12,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17608 states, 17608 states have (on average 1.6847455701953657) internal successors, (29665), 17607 states have internal predecessors, (29665), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:12,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17608 states to 17608 states and 29665 transitions. [2021-12-06 20:43:12,372 INFO L704 BuchiCegarLoop]: Abstraction has 17608 states and 29665 transitions. [2021-12-06 20:43:12,372 INFO L587 BuchiCegarLoop]: Abstraction has 17608 states and 29665 transitions. [2021-12-06 20:43:12,372 INFO L425 BuchiCegarLoop]: ======== Iteration 42============ [2021-12-06 20:43:12,372 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17608 states and 29665 transitions. [2021-12-06 20:43:12,406 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9920 [2021-12-06 20:43:12,406 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:12,406 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:12,408 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:12,408 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:12,408 INFO L791 eck$LassoCheckResult]: Stem: 5977705#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5977706#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 5978274#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5978275#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 5977063#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 5977064#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 5978563#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 5979485#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 5978075#L111 assume !(0 == getOrigin_~person#1); 5976321#L115 assume !(1 == getOrigin_~person#1); 5976322#L119 assume !(2 == getOrigin_~person#1); 5979446#L123 assume !(3 == getOrigin_~person#1); 5976983#L127 assume !(4 == getOrigin_~person#1); 5976984#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 5978787#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5978094#L551 assume !(0 == initPersonOnFloor_~floor#1); 5978095#L578 assume 1 == initPersonOnFloor_~floor#1; 5978581#L579 assume !(0 == initPersonOnFloor_~person#1); 5977718#L582 assume !(1 == initPersonOnFloor_~person#1); 5977719#L585 assume !(2 == initPersonOnFloor_~person#1); 5978618#L588 assume !(3 == initPersonOnFloor_~person#1); 5979156#L591 assume !(4 == initPersonOnFloor_~person#1); 5978670#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 5978671#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5977545#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 5977546#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 5976722#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 5976723#L343 assume !(0 == callOnFloor_~floorID#1); 5977829#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 5977249#L355-2 assume { :end_inline_callOnFloor } true; 5977250#L695 assume { :end_inline_initPersonOnFloor } true; 5978508#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 5979404#L111-1 assume !(0 == getOrigin_~person#1); 5977167#L115-1 assume !(1 == getOrigin_~person#1); 5977168#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 5976778#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5976779#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 5978327#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 5978582#L605-1 assume 2 == initPersonOnFloor_~floor#1; 5976891#L606-2 assume !(0 == initPersonOnFloor_~person#1); 5976892#L609-2 assume !(1 == initPersonOnFloor_~person#1); 5978714#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 5978788#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5976611#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 5976612#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 5979053#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 5977620#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 5979328#L343-2 assume !(0 == callOnFloor_~floorID#1); 5976629#L346-2 assume !(1 == callOnFloor_~floorID#1); 5976630#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 5978837#L355-5 assume { :end_inline_callOnFloor } true; 5978687#L695-1 assume { :end_inline_initPersonOnFloor } true; 5978688#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5979308#L275 assume !(0 == isFloorCalling_~floorID#1); 5978799#L279 assume !(1 == isFloorCalling_~floorID#1); 5978800#L283 assume !(2 == isFloorCalling_~floorID#1); 5979014#L287 assume !(3 == isFloorCalling_~floorID#1); 5978185#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5976875#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 5976819#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 5976820#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5978739#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5979407#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 5977856#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 5977857#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5976930#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 5976931#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 5977686#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 5977687#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 5978109#L2489 assume !(0 != timeShift_~tmp___9~2#1); 5977028#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 5977029#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5976462#L275-3 assume !(0 == isFloorCalling_~floorID#1); 5976463#L279-3 assume !(1 == isFloorCalling_~floorID#1); 5979126#L283-3 assume !(2 == isFloorCalling_~floorID#1); 5979167#L287-3 assume !(3 == isFloorCalling_~floorID#1); 5978061#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5978062#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 5977527#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 5977528#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 5976394#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 5976395#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 5979327#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 5979471#L1882 assume !(~currentFloorID~0 < 0); 5979127#L1897 assume !(~currentFloorID~0 < 0); 5978517#L1910 assume ~currentFloorID~0 < 1; 5978518#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5976768#L275-5 assume !(0 == isFloorCalling_~floorID#1); 5976769#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5978412#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 5979108#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 5977941#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 5979584#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 5979583#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 5978983#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 5976811#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 5976812#L2281 assume !(0 != continueInDirection_~tmp~16#1); 5978066#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5979379#L2293-1 assume { :end_inline_continueInDirection } true; 5981942#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5981941#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 5981940#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 5981936#L1334 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 5981923#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 5981916#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 5981914#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 5981899#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 5981897#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 5981894#L1006-2 assume !false; 5981895#L1007 [2021-12-06 20:43:12,409 INFO L793 eck$LassoCheckResult]: Loop: 5981895#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5985905#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 5985904#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 5985903#L1014 assume 1 != cleanup_~tmp___0~0#1; 5985901#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5985899#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5985897#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 5985884#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 5985876#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 5985862#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 5985846#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 5985842#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5985828#L275-30 assume !(0 == isFloorCalling_~floorID#1); 5985826#L279-30 assume !(1 == isFloorCalling_~floorID#1); 5985824#L283-30 assume !(2 == isFloorCalling_~floorID#1); 5985822#L287-30 assume !(3 == isFloorCalling_~floorID#1); 5985820#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5985818#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 5985816#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 5985814#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5985808#L275-32 assume !(0 == isFloorCalling_~floorID#1); 5985801#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5985785#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 5985780#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 5985776#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 5985774#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 5985772#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 5985769#L2580-3 assume !(1 == ~doorState~0); 5985765#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5985760#L275-33 assume !(0 == isFloorCalling_~floorID#1); 5985741#L279-33 assume !(1 == isFloorCalling_~floorID#1); 5985737#L283-33 assume !(2 == isFloorCalling_~floorID#1); 5985735#L287-33 assume !(3 == isFloorCalling_~floorID#1); 5985730#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5985724#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 5985718#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 5985703#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 5985701#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 5985695#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 5985659#L1876-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 5985660#L1882-2 assume !(~currentFloorID~0 < 0); 5985712#L1897-2 assume ~currentFloorID~0 < 0; 5985721#L1899-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 5985709#L1900-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 5985662#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 5985700#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 5985653#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 5984496#L2277-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 5976290#L854-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 5976291#L2281-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 5985483#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5985480#L2293-7 assume { :end_inline_continueInDirection } true; 5984670#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5984668#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 5984666#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 5984664#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 5984662#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 5984660#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 5984658#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 5984655#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 5984651#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 5984645#L1006-2 assume !false; 5984633#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5984628#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 5984614#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 5984612#L1014 assume 1 != cleanup_~tmp___0~0#1; 5984609#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5984606#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5984600#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 5984588#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 5984581#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 5984569#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 5984567#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 5984565#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5984563#L275-30 assume !(0 == isFloorCalling_~floorID#1); 5984561#L279-30 assume !(1 == isFloorCalling_~floorID#1); 5984558#L283-30 assume !(2 == isFloorCalling_~floorID#1); 5984555#L287-30 assume !(3 == isFloorCalling_~floorID#1); 5984554#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5984553#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 5984552#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 5984551#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5984549#L275-32 assume !(0 == isFloorCalling_~floorID#1); 5984544#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5984529#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 5984524#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 5984520#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 5984518#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 5984516#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 5984513#L2580-3 assume !(1 == ~doorState~0); 5984511#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5984510#L275-33 assume !(0 == isFloorCalling_~floorID#1); 5984509#L279-33 assume !(1 == isFloorCalling_~floorID#1); 5984508#L283-33 assume !(2 == isFloorCalling_~floorID#1); 5984507#L287-33 assume !(3 == isFloorCalling_~floorID#1); 5984506#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5984505#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 5984504#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 5984503#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 5984501#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 5984502#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 5986055#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 5978702#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 5986050#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 5986047#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 5986045#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 5986043#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5986041#L275-44 assume !(0 == isFloorCalling_~floorID#1); 5986039#L279-44 assume !(1 == isFloorCalling_~floorID#1); 5986037#L283-44 assume !(2 == isFloorCalling_~floorID#1); 5986034#L287-44 assume !(3 == isFloorCalling_~floorID#1); 5986031#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5986027#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 5986023#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 5986017#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 5986010#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 5985978#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 5985954#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 5985952#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 5985950#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 5985948#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 5985946#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 5985944#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 5985942#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 5985941#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 5985940#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 5985939#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5985938#L2293-9 assume { :end_inline_continueInDirection } true; 5985937#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5985936#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 5985934#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 5985931#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 5985927#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 5985919#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 5985917#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 5985914#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 5985913#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 5985912#L1006-2 assume !false; 5981895#L1007 [2021-12-06 20:43:12,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:12,409 INFO L85 PathProgramCache]: Analyzing trace with hash -1612995688, now seen corresponding path program 1 times [2021-12-06 20:43:12,409 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:12,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [633414185] [2021-12-06 20:43:12,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:12,410 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:12,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:12,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:12,454 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:12,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [633414185] [2021-12-06 20:43:12,454 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [633414185] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:12,454 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:12,454 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:43:12,454 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [770594537] [2021-12-06 20:43:12,454 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:12,455 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:43:12,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:12,455 INFO L85 PathProgramCache]: Analyzing trace with hash 282868877, now seen corresponding path program 2 times [2021-12-06 20:43:12,455 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:12,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [264907278] [2021-12-06 20:43:12,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:12,455 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:12,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:12,483 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-06 20:43:12,483 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:12,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [264907278] [2021-12-06 20:43:12,484 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [264907278] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:12,484 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:12,484 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:43:12,484 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [978795945] [2021-12-06 20:43:12,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:12,484 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:12,484 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:12,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:43:12,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:43:12,484 INFO L87 Difference]: Start difference. First operand 17608 states and 29665 transitions. cyclomatic complexity: 12062 Second operand has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 5 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:13,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:13,201 INFO L93 Difference]: Finished difference Result 54883 states and 92166 transitions. [2021-12-06 20:43:13,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 20:43:13,202 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54883 states and 92166 transitions. [2021-12-06 20:43:13,378 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 32046 [2021-12-06 20:43:13,515 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54883 states to 54813 states and 92091 transitions. [2021-12-06 20:43:13,515 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 35028 [2021-12-06 20:43:13,537 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 35028 [2021-12-06 20:43:13,537 INFO L73 IsDeterministic]: Start isDeterministic. Operand 54813 states and 92091 transitions. [2021-12-06 20:43:13,537 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:13,538 INFO L681 BuchiCegarLoop]: Abstraction has 54813 states and 92091 transitions. [2021-12-06 20:43:13,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54813 states and 92091 transitions. [2021-12-06 20:43:13,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54813 to 32894. [2021-12-06 20:43:13,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32894 states, 32894 states have (on average 1.6831641028759043) internal successors, (55366), 32893 states have internal predecessors, (55366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:13,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32894 states to 32894 states and 55366 transitions. [2021-12-06 20:43:13,883 INFO L704 BuchiCegarLoop]: Abstraction has 32894 states and 55366 transitions. [2021-12-06 20:43:13,883 INFO L587 BuchiCegarLoop]: Abstraction has 32894 states and 55366 transitions. [2021-12-06 20:43:13,883 INFO L425 BuchiCegarLoop]: ======== Iteration 43============ [2021-12-06 20:43:13,883 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32894 states and 55366 transitions. [2021-12-06 20:43:13,950 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 19912 [2021-12-06 20:43:13,950 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:13,950 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:13,952 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:13,952 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:13,952 INFO L791 eck$LassoCheckResult]: Stem: 6050206#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6050207#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6050770#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6050771#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 6049576#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6049577#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6051059#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6052034#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6050581#L111 assume !(0 == getOrigin_~person#1); 6048835#L115 assume !(1 == getOrigin_~person#1); 6048836#L119 assume !(2 == getOrigin_~person#1); 6051985#L123 assume !(3 == getOrigin_~person#1); 6049497#L127 assume !(4 == getOrigin_~person#1); 6049498#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6051286#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6050599#L551 assume !(0 == initPersonOnFloor_~floor#1); 6050600#L578 assume 1 == initPersonOnFloor_~floor#1; 6051077#L579 assume !(0 == initPersonOnFloor_~person#1); 6050219#L582 assume !(1 == initPersonOnFloor_~person#1); 6050220#L585 assume !(2 == initPersonOnFloor_~person#1); 6051115#L588 assume !(3 == initPersonOnFloor_~person#1); 6051678#L591 assume !(4 == initPersonOnFloor_~person#1); 6051171#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6051172#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6050047#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6050048#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6049233#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6049234#L343 assume !(0 == callOnFloor_~floorID#1); 6050329#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6049761#L355-2 assume { :end_inline_callOnFloor } true; 6049762#L695 assume { :end_inline_initPersonOnFloor } true; 6051005#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6051934#L111-1 assume !(0 == getOrigin_~person#1); 6049680#L115-1 assume !(1 == getOrigin_~person#1); 6049681#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6049287#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6049288#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 6050822#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 6051080#L605-1 assume 2 == initPersonOnFloor_~floor#1; 6049403#L606-2 assume !(0 == initPersonOnFloor_~person#1); 6049404#L609-2 assume !(1 == initPersonOnFloor_~person#1); 6051212#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6051287#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6049124#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6049125#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6051565#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6050121#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6051857#L343-2 assume !(0 == callOnFloor_~floorID#1); 6049142#L346-2 assume !(1 == callOnFloor_~floorID#1); 6049143#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6051338#L355-5 assume { :end_inline_callOnFloor } true; 6051185#L695-1 assume { :end_inline_initPersonOnFloor } true; 6051186#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6051835#L275 assume !(0 == isFloorCalling_~floorID#1); 6051298#L279 assume !(1 == isFloorCalling_~floorID#1); 6051299#L283 assume !(2 == isFloorCalling_~floorID#1); 6051523#L287 assume !(3 == isFloorCalling_~floorID#1); 6050688#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6049386#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6049330#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6049331#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6051237#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6051937#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6050361#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6050362#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6049443#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6049444#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6050191#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6050192#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6050613#L2489 assume !(0 != timeShift_~tmp___9~2#1); 6049541#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 6049542#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6048976#L275-3 assume !(0 == isFloorCalling_~floorID#1); 6048977#L279-3 assume !(1 == isFloorCalling_~floorID#1); 6051646#L283-3 assume !(2 == isFloorCalling_~floorID#1); 6051688#L287-3 assume !(3 == isFloorCalling_~floorID#1); 6050567#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6050568#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6050028#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6050029#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6048907#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6048908#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6051854#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6052012#L1882 assume !(~currentFloorID~0 < 0); 6051647#L1897 assume !(~currentFloorID~0 < 0); 6051012#L1910 assume ~currentFloorID~0 < 1; 6051013#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6049283#L275-5 assume !(0 == isFloorCalling_~floorID#1); 6049284#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6050913#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 6051627#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6050442#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6052151#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6052150#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6051492#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6049320#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6049321#L2281 assume !(0 != continueInDirection_~tmp~16#1); 6050572#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6051906#L2293-1 assume { :end_inline_continueInDirection } true; 6048933#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6048934#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6049965#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6051467#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6050689#L1336 assume !(0 != ~landingButtons_spc1_1~0); 6050027#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6052684#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6052680#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6052676#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6052674#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6052666#L1006-2 assume !false; 6052667#L1007 [2021-12-06 20:43:13,953 INFO L793 eck$LassoCheckResult]: Loop: 6052667#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6064653#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6064641#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6064642#L1014 assume 1 != cleanup_~tmp___0~0#1; 6064629#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6064630#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6064567#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6064568#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6064528#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6064516#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6064514#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6064512#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6064510#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6064508#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6064506#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6064504#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6064502#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6064500#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6064497#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6064494#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6064491#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6064489#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6064481#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6064450#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6064451#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6064442#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6064443#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6064437#L2580-3 assume !(1 == ~doorState~0); 6064436#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6064428#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6064429#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6064423#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6064424#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6064418#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6064419#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6064413#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6064414#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6064408#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6064409#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6064402#L1876-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6064403#L1882-2 assume !(~currentFloorID~0 < 0); 6064396#L1897-2 assume !(~currentFloorID~0 < 0); 6064397#L1910-2 assume !(~currentFloorID~0 < 1); 6064390#L1926-2 assume !(~currentFloorID~0 < 1); 6064391#L1939-2 assume ~currentFloorID~0 < 2; 6064384#L1941-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6064385#L275-36 assume !(0 == isFloorCalling_~floorID#1); 6064377#L279-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6064374#L302-36 stopRequestedInDirection__wrappee__weight_#t~ret36#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___2~3#1 := stopRequestedInDirection__wrappee__weight_#t~ret36#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret36#1; 6064276#L1945-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6064277#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6064268#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6064269#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6064241#L2277-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6064242#L854-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6072073#L2281-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 6051615#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6051042#L2293-7 assume { :end_inline_continueInDirection } true; 6049874#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6074375#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6074374#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6074373#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6074372#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6074371#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6074370#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6074369#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6074368#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6074367#L1006-2 assume !false; 6074366#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6074365#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6074364#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6074363#L1014 assume 1 != cleanup_~tmp___0~0#1; 6074361#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6074358#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6074353#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6074342#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6074336#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6074325#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6074324#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6074323#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6074322#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6074321#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6074320#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6074319#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6074318#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6074317#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6074316#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6074315#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6074313#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6074312#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6074307#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6074303#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6074302#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6074300#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6074301#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6074291#L2580-3 assume !(1 == ~doorState~0); 6074288#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6074210#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6074189#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6074188#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6074187#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6074185#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6074179#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6074166#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6074162#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6074152#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6074149#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6074142#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6074139#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6074137#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6074136#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6074124#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6074121#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6074107#L275-44 assume !(0 == isFloorCalling_~floorID#1); 6074075#L279-44 assume !(1 == isFloorCalling_~floorID#1); 6074073#L283-44 assume !(2 == isFloorCalling_~floorID#1); 6074067#L287-44 assume !(3 == isFloorCalling_~floorID#1); 6074065#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6074063#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6074055#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6074052#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6073876#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6073869#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6073867#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6073866#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6073807#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 6073804#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6073772#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6071827#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6071828#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6072206#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6072205#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 6072204#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6072203#L2293-9 assume { :end_inline_continueInDirection } true; 6072202#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6064705#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6064706#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6064693#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6064694#L1336-1 assume !(0 != ~landingButtons_spc1_1~0); 6064677#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6064678#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6064669#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6064670#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6064661#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6064662#L1006-2 assume !false; 6052667#L1007 [2021-12-06 20:43:13,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:13,953 INFO L85 PathProgramCache]: Analyzing trace with hash -107307420, now seen corresponding path program 1 times [2021-12-06 20:43:13,954 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:13,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616492825] [2021-12-06 20:43:13,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:13,954 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:13,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:13,986 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:13,986 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:13,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616492825] [2021-12-06 20:43:13,986 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616492825] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:13,986 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:13,986 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:43:13,986 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2054159389] [2021-12-06 20:43:13,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:13,986 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:43:13,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:13,987 INFO L85 PathProgramCache]: Analyzing trace with hash -260759340, now seen corresponding path program 1 times [2021-12-06 20:43:13,987 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:13,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106881098] [2021-12-06 20:43:13,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:13,987 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:13,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:14,015 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-06 20:43:14,015 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:14,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106881098] [2021-12-06 20:43:14,015 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106881098] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:14,015 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:14,015 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:43:14,016 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213812884] [2021-12-06 20:43:14,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:14,016 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:14,016 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:14,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:43:14,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:43:14,016 INFO L87 Difference]: Start difference. First operand 32894 states and 55366 transitions. cyclomatic complexity: 22483 Second operand has 5 states, 5 states have (on average 22.0) internal successors, (110), 5 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:14,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:14,208 INFO L93 Difference]: Finished difference Result 65681 states and 110545 transitions. [2021-12-06 20:43:14,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:43:14,209 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65681 states and 110545 transitions. [2021-12-06 20:43:14,416 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 39778 [2021-12-06 20:43:14,578 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65681 states to 65681 states and 110545 transitions. [2021-12-06 20:43:14,578 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43697 [2021-12-06 20:43:14,605 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43697 [2021-12-06 20:43:14,606 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65681 states and 110545 transitions. [2021-12-06 20:43:14,606 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:14,606 INFO L681 BuchiCegarLoop]: Abstraction has 65681 states and 110545 transitions. [2021-12-06 20:43:14,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65681 states and 110545 transitions. [2021-12-06 20:43:15,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65681 to 65681. [2021-12-06 20:43:15,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65681 states, 65681 states have (on average 1.683059027724913) internal successors, (110545), 65680 states have internal predecessors, (110545), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:15,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65681 states to 65681 states and 110545 transitions. [2021-12-06 20:43:15,181 INFO L704 BuchiCegarLoop]: Abstraction has 65681 states and 110545 transitions. [2021-12-06 20:43:15,181 INFO L587 BuchiCegarLoop]: Abstraction has 65681 states and 110545 transitions. [2021-12-06 20:43:15,181 INFO L425 BuchiCegarLoop]: ======== Iteration 44============ [2021-12-06 20:43:15,181 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65681 states and 110545 transitions. [2021-12-06 20:43:15,322 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 39778 [2021-12-06 20:43:15,322 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:15,322 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:15,324 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:15,324 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:15,325 INFO L791 eck$LassoCheckResult]: Stem: 6148815#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6148816#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6149408#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6149409#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 6148171#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6148172#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6149723#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6150802#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6149200#L111 assume !(0 == getOrigin_~person#1); 6147427#L115 assume !(1 == getOrigin_~person#1); 6147428#L119 assume !(2 == getOrigin_~person#1); 6150757#L123 assume !(3 == getOrigin_~person#1); 6148091#L127 assume !(4 == getOrigin_~person#1); 6148092#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6149961#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6149220#L551 assume !(0 == initPersonOnFloor_~floor#1); 6149221#L578 assume 1 == initPersonOnFloor_~floor#1; 6149741#L579 assume !(0 == initPersonOnFloor_~person#1); 6148830#L582 assume !(1 == initPersonOnFloor_~person#1); 6148831#L585 assume !(2 == initPersonOnFloor_~person#1); 6149781#L588 assume !(3 == initPersonOnFloor_~person#1); 6150390#L591 assume !(4 == initPersonOnFloor_~person#1); 6149839#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6149840#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6148654#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6148655#L1285 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6149172#L1288 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6149173#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6150557#L343 assume !(0 == callOnFloor_~floorID#1); 6150558#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6148356#L355-2 assume { :end_inline_callOnFloor } true; 6148357#L695 assume { :end_inline_initPersonOnFloor } true; 6150767#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6150768#L111-1 assume !(0 == getOrigin_~person#1); 6148276#L115-1 assume !(1 == getOrigin_~person#1); 6148277#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6147884#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6147885#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 6149742#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 6149743#L605-1 assume 2 == initPersonOnFloor_~floor#1; 6147998#L606-2 assume !(0 == initPersonOnFloor_~person#1); 6147999#L609-2 assume !(1 == initPersonOnFloor_~person#1); 6150895#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6149963#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6147716#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6147717#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6150261#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6148729#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6150652#L343-2 assume !(0 == callOnFloor_~floorID#1); 6150653#L346-2 assume !(1 == callOnFloor_~floorID#1); 6150919#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6150920#L355-5 assume { :end_inline_callOnFloor } true; 6149855#L695-1 assume { :end_inline_initPersonOnFloor } true; 6149856#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6150878#L275 assume !(0 == isFloorCalling_~floorID#1); 6150879#L279 assume !(1 == isFloorCalling_~floorID#1); 6150209#L283 assume !(2 == isFloorCalling_~floorID#1); 6150210#L287 assume !(3 == isFloorCalling_~floorID#1); 6149320#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6149321#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6147925#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6147926#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6150944#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6150945#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6148973#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6148974#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6153882#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6153881#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6153880#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6153879#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6153877#L2489 assume !(0 != timeShift_~tmp___9~2#1); 6153876#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 6153875#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6153874#L275-3 assume !(0 == isFloorCalling_~floorID#1); 6153873#L279-3 assume !(1 == isFloorCalling_~floorID#1); 6153872#L283-3 assume !(2 == isFloorCalling_~floorID#1); 6153871#L287-3 assume !(3 == isFloorCalling_~floorID#1); 6153870#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6153869#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6153868#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6153867#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6153866#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6153865#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6153864#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6153863#L1882 assume !(~currentFloorID~0 < 0); 6153862#L1897 assume !(~currentFloorID~0 < 0); 6153861#L1910 assume ~currentFloorID~0 < 1; 6153860#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6153858#L275-5 assume !(0 == isFloorCalling_~floorID#1); 6150688#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6149560#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 6150915#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6150965#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6150966#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6150961#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6150962#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6147917#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6147918#L2281 assume !(0 != continueInDirection_~tmp~16#1); 6153835#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6153832#L2293-1 assume { :end_inline_continueInDirection } true; 6153831#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6153830#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6153829#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6153827#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6153826#L1336 assume !(0 != ~landingButtons_spc1_1~0); 6153823#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6153822#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6153821#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6153819#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6153816#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6153812#L1006-2 assume !false; 6153813#L1007 [2021-12-06 20:43:15,325 INFO L793 eck$LassoCheckResult]: Loop: 6153813#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6187979#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6187977#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6187975#L1014 assume 1 != cleanup_~tmp___0~0#1; 6187973#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187971#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187970#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6187969#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6187878#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6187866#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6187864#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6187862#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187860#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6187859#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6187853#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6187851#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6187849#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187847#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6187845#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6187843#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187842#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6187798#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187781#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6187774#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6187768#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6187764#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6187759#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6187753#L2580-3 assume !(1 == ~doorState~0); 6187747#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187735#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6187725#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6187720#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6187719#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6187718#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187717#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6187715#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6187713#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6187711#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6187709#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6187706#L1876-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6187707#L1882-2 assume !(~currentFloorID~0 < 0); 6187716#L1897-2 assume !(~currentFloorID~0 < 0); 6187714#L1910-2 assume !(~currentFloorID~0 < 1); 6187712#L1926-2 assume !(~currentFloorID~0 < 1); 6187710#L1939-2 assume ~currentFloorID~0 < 2; 6187708#L1941-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187690#L275-36 assume !(0 == isFloorCalling_~floorID#1); 6187676#L279-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187664#L302-36 stopRequestedInDirection__wrappee__weight_#t~ret36#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___2~3#1 := stopRequestedInDirection__wrappee__weight_#t~ret36#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret36#1; 6187650#L1945-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6187646#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6187642#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6187637#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6187579#L2277-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6187538#L854-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6187532#L2281-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 6187527#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6187524#L2293-7 assume { :end_inline_continueInDirection } true; 6187522#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6187521#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6187520#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6187518#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6187515#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6187479#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6187478#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6187477#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6187476#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6187439#L1006-2 assume !false; 6187436#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6187429#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6187427#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6187425#L1014 assume 1 != cleanup_~tmp___0~0#1; 6187417#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187414#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187407#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6187399#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6187366#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6187348#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6187347#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6187344#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187342#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6187341#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6187340#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6187339#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6187288#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187281#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6187279#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6187278#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6187271#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6187272#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6187021#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6187011#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6187009#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6186559#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6186560#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6186553#L2580-3 assume !(1 == ~doorState~0); 6186551#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6186550#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6186549#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6186548#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6186547#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6186546#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6186545#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6186544#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6186543#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6186542#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6186541#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6186540#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6186539#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6186538#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6186537#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6186536#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6186535#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6186534#L275-44 assume !(0 == isFloorCalling_~floorID#1); 6186533#L279-44 assume !(1 == isFloorCalling_~floorID#1); 6186532#L283-44 assume !(2 == isFloorCalling_~floorID#1); 6186531#L287-44 assume !(3 == isFloorCalling_~floorID#1); 6186530#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6186529#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6186528#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6186527#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6186526#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6186525#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6186524#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6186523#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6186522#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 6186521#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6186519#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6186517#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6186515#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6186513#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6186510#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 6186511#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6188030#L2293-9 assume { :end_inline_continueInDirection } true; 6186482#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6186476#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6186470#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6186471#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6188020#L1336-1 assume !(0 != ~landingButtons_spc1_1~0); 6188012#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6188005#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6187993#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6187987#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6187982#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6187980#L1006-2 assume !false; 6153813#L1007 [2021-12-06 20:43:15,325 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:15,325 INFO L85 PathProgramCache]: Analyzing trace with hash -127296364, now seen corresponding path program 1 times [2021-12-06 20:43:15,326 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:15,326 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [114591762] [2021-12-06 20:43:15,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:15,326 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:15,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:15,355 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:15,355 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:15,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [114591762] [2021-12-06 20:43:15,355 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [114591762] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:15,356 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:15,356 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:43:15,356 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [358495166] [2021-12-06 20:43:15,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:15,356 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:43:15,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:15,356 INFO L85 PathProgramCache]: Analyzing trace with hash -260759340, now seen corresponding path program 2 times [2021-12-06 20:43:15,356 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:15,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2108508] [2021-12-06 20:43:15,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:15,357 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:15,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:15,386 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-06 20:43:15,387 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:15,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2108508] [2021-12-06 20:43:15,387 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2108508] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:15,387 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:15,387 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:43:15,387 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1909238020] [2021-12-06 20:43:15,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:15,387 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:15,387 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:15,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:43:15,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:43:15,388 INFO L87 Difference]: Start difference. First operand 65681 states and 110545 transitions. cyclomatic complexity: 44875 Second operand has 5 states, 5 states have (on average 22.2) internal successors, (111), 5 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:15,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:15,572 INFO L93 Difference]: Finished difference Result 64758 states and 108997 transitions. [2021-12-06 20:43:15,572 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 20:43:15,572 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64758 states and 108997 transitions. [2021-12-06 20:43:15,777 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 39778 [2021-12-06 20:43:15,937 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64758 states to 64758 states and 108997 transitions. [2021-12-06 20:43:15,937 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42774 [2021-12-06 20:43:15,964 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42774 [2021-12-06 20:43:15,964 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64758 states and 108997 transitions. [2021-12-06 20:43:15,965 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:15,965 INFO L681 BuchiCegarLoop]: Abstraction has 64758 states and 108997 transitions. [2021-12-06 20:43:15,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64758 states and 108997 transitions. [2021-12-06 20:43:16,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64758 to 64758. [2021-12-06 20:43:16,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64758 states, 64758 states have (on average 1.6831433954106056) internal successors, (108997), 64757 states have internal predecessors, (108997), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:16,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64758 states to 64758 states and 108997 transitions. [2021-12-06 20:43:16,528 INFO L704 BuchiCegarLoop]: Abstraction has 64758 states and 108997 transitions. [2021-12-06 20:43:16,528 INFO L587 BuchiCegarLoop]: Abstraction has 64758 states and 108997 transitions. [2021-12-06 20:43:16,528 INFO L425 BuchiCegarLoop]: ======== Iteration 45============ [2021-12-06 20:43:16,528 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64758 states and 108997 transitions. [2021-12-06 20:43:16,664 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 39778 [2021-12-06 20:43:16,664 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:16,664 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:16,668 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:16,668 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:16,668 INFO L791 eck$LassoCheckResult]: Stem: 6279253#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6279254#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6279827#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6279828#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 6278617#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6278618#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6280124#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6281106#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6279627#L111 assume !(0 == getOrigin_~person#1); 6277884#L115 assume !(1 == getOrigin_~person#1); 6277885#L119 assume !(2 == getOrigin_~person#1); 6281059#L123 assume !(3 == getOrigin_~person#1); 6278537#L127 assume !(4 == getOrigin_~person#1); 6278538#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6280351#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6279645#L551 assume !(0 == initPersonOnFloor_~floor#1); 6279646#L578 assume 1 == initPersonOnFloor_~floor#1; 6280142#L579 assume !(0 == initPersonOnFloor_~person#1); 6279267#L582 assume !(1 == initPersonOnFloor_~person#1); 6279268#L585 assume !(2 == initPersonOnFloor_~person#1); 6280182#L588 assume !(3 == initPersonOnFloor_~person#1); 6280751#L591 assume !(4 == initPersonOnFloor_~person#1); 6280239#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6280240#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6279093#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6279094#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6278280#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6278281#L343 assume !(0 == callOnFloor_~floorID#1); 6279381#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6278801#L355-2 assume { :end_inline_callOnFloor } true; 6278802#L695 assume { :end_inline_initPersonOnFloor } true; 6280068#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6281012#L111-1 assume !(0 == getOrigin_~person#1); 6278721#L115-1 assume !(1 == getOrigin_~person#1); 6278722#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6278334#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6278335#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 6279881#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 6280143#L605-1 assume 2 == initPersonOnFloor_~floor#1; 6278447#L606-2 assume !(0 == initPersonOnFloor_~person#1); 6278448#L609-2 assume !(1 == initPersonOnFloor_~person#1); 6280278#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6280352#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6278170#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6278171#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6280640#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6279167#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6280930#L343-2 assume !(0 == callOnFloor_~floorID#1); 6278188#L346-2 assume !(1 == callOnFloor_~floorID#1); 6278189#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6280406#L355-5 assume { :end_inline_callOnFloor } true; 6280253#L695-1 assume { :end_inline_initPersonOnFloor } true; 6280254#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6280910#L275 assume !(0 == isFloorCalling_~floorID#1); 6280365#L279 assume !(1 == isFloorCalling_~floorID#1); 6280366#L283 assume !(2 == isFloorCalling_~floorID#1); 6280597#L287 assume !(3 == isFloorCalling_~floorID#1); 6279741#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6278431#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6278375#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6278376#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6280304#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6281015#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6279408#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6279409#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6278485#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6278486#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6279234#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6279235#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6279660#L2489 assume !(0 != timeShift_~tmp___9~2#1); 6278582#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 6278583#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6278023#L275-3 assume !(0 == isFloorCalling_~floorID#1); 6278024#L279-3 assume !(1 == isFloorCalling_~floorID#1); 6280718#L283-3 assume !(2 == isFloorCalling_~floorID#1); 6280765#L287-3 assume !(3 == isFloorCalling_~floorID#1); 6279613#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6279614#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6279074#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6279075#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6277956#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6277957#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6280929#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6281085#L1882 assume !(~currentFloorID~0 < 0); 6280719#L1897 assume !(~currentFloorID~0 < 0); 6280078#L1910 assume ~currentFloorID~0 < 1; 6280079#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6278324#L275-5 assume !(0 == isFloorCalling_~floorID#1); 6278325#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6279969#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 6280700#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6279492#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6281211#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6281210#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6280563#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6278367#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6278368#L2281 assume !(0 != continueInDirection_~tmp~16#1); 6279618#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6280983#L2293-1 assume { :end_inline_continueInDirection } true; 6277982#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6277983#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6279009#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6280533#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6280534#L1336 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6283778#L1677-1 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6283777#L1340 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6283776#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6283775#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6283773#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6283771#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6283769#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6283756#L1006-2 assume !false; 6283757#L1007 [2021-12-06 20:43:16,669 INFO L793 eck$LassoCheckResult]: Loop: 6283757#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6339323#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6339322#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6339321#L1014 assume 1 != cleanup_~tmp___0~0#1; 6339319#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6339317#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6339314#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6339302#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6339289#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6339278#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6339277#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6339275#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6339273#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6339271#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6339269#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6339268#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6339267#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6338316#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6334473#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6334472#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6334470#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6334469#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6334466#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6334428#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6334426#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6334425#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6334424#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6334422#L2580-3 assume !(1 == ~doorState~0); 6334420#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6334419#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6334417#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6334413#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6334412#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6334411#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6334410#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6334409#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6334408#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6334407#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6334406#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6334039#L1876-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6334038#L1882-2 assume !(~currentFloorID~0 < 0); 6334037#L1897-2 assume !(~currentFloorID~0 < 0); 6334036#L1910-2 assume !(~currentFloorID~0 < 1); 6334035#L1926-2 assume !(~currentFloorID~0 < 1); 6334034#L1939-2 assume ~currentFloorID~0 < 2; 6334032#L1941-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6334030#L275-36 assume !(0 == isFloorCalling_~floorID#1); 6334028#L279-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6334023#L302-36 stopRequestedInDirection__wrappee__weight_#t~ret36#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___2~3#1 := stopRequestedInDirection__wrappee__weight_#t~ret36#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret36#1; 6333997#L1945-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6333996#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6333995#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6333992#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6333991#L2277-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6312562#L854-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6307562#L2281-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 6280689#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6280104#L2293-7 assume { :end_inline_continueInDirection } true; 6278915#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6339877#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6339875#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339874#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339873#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339872#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339870#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339868#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6339866#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6339864#L1006-2 assume !false; 6339862#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6339861#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6339860#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6339859#L1014 assume 1 != cleanup_~tmp___0~0#1; 6339858#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6339857#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6339856#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6339851#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6339847#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6339836#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6339835#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6339834#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6339833#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6339828#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6339826#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6339825#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6339824#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6339823#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6339822#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6339821#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6339385#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6339386#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6339384#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6339359#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6339360#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6339560#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6339249#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6339248#L2580-3 assume !(1 == ~doorState~0); 6339246#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6339245#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6339242#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6278250#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6278251#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6278322#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6279176#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6278528#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6278529#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6277727#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6277728#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6280583#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6279031#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6278928#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6277838#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6277839#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6279621#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6279622#L275-44 assume !(0 == isFloorCalling_~floorID#1); 6280233#L279-44 assume !(1 == isFloorCalling_~floorID#1); 6280234#L283-44 assume !(2 == isFloorCalling_~floorID#1); 6279425#L287-44 assume !(3 == isFloorCalling_~floorID#1); 6279426#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6279635#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6279845#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6279846#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6280589#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6280270#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6280271#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6281192#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6279143#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 6279144#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6281169#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6279398#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6277784#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6277785#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6279022#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 6280634#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6339315#L2293-9 assume { :end_inline_continueInDirection } true; 6339304#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6339298#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6339297#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339296#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6277693#L1336-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6277694#L1677-6 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6278913#L1340-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6279855#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6281188#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339335#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6339333#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6339327#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6339325#L1006-2 assume !false; 6283757#L1007 [2021-12-06 20:43:16,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:16,669 INFO L85 PathProgramCache]: Analyzing trace with hash -677919713, now seen corresponding path program 1 times [2021-12-06 20:43:16,669 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:16,669 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [745898020] [2021-12-06 20:43:16,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:16,669 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:16,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:16,682 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:43:16,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:16,728 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:43:16,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:16,728 INFO L85 PathProgramCache]: Analyzing trace with hash -2110588049, now seen corresponding path program 1 times [2021-12-06 20:43:16,728 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:16,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1466273759] [2021-12-06 20:43:16,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:16,729 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:16,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:16,755 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-06 20:43:16,755 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:16,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1466273759] [2021-12-06 20:43:16,755 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1466273759] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:16,755 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:16,755 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:43:16,756 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [652034377] [2021-12-06 20:43:16,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:16,756 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:16,756 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:16,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 20:43:16,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:43:16,756 INFO L87 Difference]: Start difference. First operand 64758 states and 108997 transitions. cyclomatic complexity: 44250 Second operand has 7 states, 7 states have (on average 17.714285714285715) internal successors, (124), 7 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:17,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:17,125 INFO L93 Difference]: Finished difference Result 116865 states and 199788 transitions. [2021-12-06 20:43:17,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 20:43:17,125 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 116865 states and 199788 transitions. [2021-12-06 20:43:17,517 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73336 [2021-12-06 20:43:17,813 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 116865 states to 116865 states and 199788 transitions. [2021-12-06 20:43:17,813 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 77055 [2021-12-06 20:43:17,862 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 77055 [2021-12-06 20:43:17,862 INFO L73 IsDeterministic]: Start isDeterministic. Operand 116865 states and 199788 transitions. [2021-12-06 20:43:17,863 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:17,863 INFO L681 BuchiCegarLoop]: Abstraction has 116865 states and 199788 transitions. [2021-12-06 20:43:17,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116865 states and 199788 transitions. [2021-12-06 20:43:18,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116865 to 64953. [2021-12-06 20:43:18,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64953 states, 64953 states have (on average 1.6810924822564008) internal successors, (109192), 64952 states have internal predecessors, (109192), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:18,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64953 states to 64953 states and 109192 transitions. [2021-12-06 20:43:18,591 INFO L704 BuchiCegarLoop]: Abstraction has 64953 states and 109192 transitions. [2021-12-06 20:43:18,591 INFO L587 BuchiCegarLoop]: Abstraction has 64953 states and 109192 transitions. [2021-12-06 20:43:18,591 INFO L425 BuchiCegarLoop]: ======== Iteration 46============ [2021-12-06 20:43:18,591 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64953 states and 109192 transitions. [2021-12-06 20:43:18,729 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 39904 [2021-12-06 20:43:18,729 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:18,729 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:18,733 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:18,733 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:18,733 INFO L791 eck$LassoCheckResult]: Stem: 6460927#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6460928#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6461508#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6461509#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 6460282#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6460283#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6461811#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6462854#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6461303#L111 assume !(0 == getOrigin_~person#1); 6459541#L115 assume !(1 == getOrigin_~person#1); 6459542#L119 assume !(2 == getOrigin_~person#1); 6462799#L123 assume !(3 == getOrigin_~person#1); 6460201#L127 assume !(4 == getOrigin_~person#1); 6460202#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6462057#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6461321#L551 assume !(0 == initPersonOnFloor_~floor#1); 6461322#L578 assume 1 == initPersonOnFloor_~floor#1; 6461829#L579 assume !(0 == initPersonOnFloor_~person#1); 6460941#L582 assume !(1 == initPersonOnFloor_~person#1); 6460942#L585 assume !(2 == initPersonOnFloor_~person#1); 6461869#L588 assume !(3 == initPersonOnFloor_~person#1); 6462473#L591 assume !(4 == initPersonOnFloor_~person#1); 6461927#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6461928#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6460768#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6460769#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6459941#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6459942#L343 assume !(0 == callOnFloor_~floorID#1); 6461052#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6460470#L355-2 assume { :end_inline_callOnFloor } true; 6460471#L695 assume { :end_inline_initPersonOnFloor } true; 6461751#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6462749#L111-1 assume !(0 == getOrigin_~person#1); 6460386#L115-1 assume !(1 == getOrigin_~person#1); 6460387#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6459995#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6459996#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 6461564#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 6461831#L605-1 assume 2 == initPersonOnFloor_~floor#1; 6460109#L606-2 assume !(0 == initPersonOnFloor_~person#1); 6460110#L609-2 assume !(1 == initPersonOnFloor_~person#1); 6461973#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6462058#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6459830#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6459831#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6462347#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6460843#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6462661#L343-2 assume !(0 == callOnFloor_~floorID#1); 6459848#L346-2 assume !(1 == callOnFloor_~floorID#1); 6459849#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6462110#L355-5 assume { :end_inline_callOnFloor } true; 6461943#L695-1 assume { :end_inline_initPersonOnFloor } true; 6461944#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6462640#L275 assume !(0 == isFloorCalling_~floorID#1); 6462069#L279 assume !(1 == isFloorCalling_~floorID#1); 6462070#L283 assume !(2 == isFloorCalling_~floorID#1); 6462304#L287 assume !(3 == isFloorCalling_~floorID#1); 6461420#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6460092#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6460037#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6460038#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6461999#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6462752#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6461080#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6461081#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6460147#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6460148#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6461147#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6462979#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6462978#L2489 assume !(0 != timeShift_~tmp___9~2#1); 6460247#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 6460248#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6459681#L275-3 assume !(0 == isFloorCalling_~floorID#1); 6459682#L279-3 assume !(1 == isFloorCalling_~floorID#1); 6462439#L283-3 assume !(2 == isFloorCalling_~floorID#1); 6462486#L287-3 assume !(3 == isFloorCalling_~floorID#1); 6461289#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6461290#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6460749#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6460750#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6459614#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6459615#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6462660#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6462834#L1882 assume !(~currentFloorID~0 < 0); 6462440#L1897 assume !(~currentFloorID~0 < 0); 6461761#L1910 assume ~currentFloorID~0 < 1; 6461762#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6459985#L275-5 assume !(0 == isFloorCalling_~floorID#1); 6459986#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6461651#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 6462417#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6461165#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6462981#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6462980#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6462267#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6460028#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6460029#L2281 assume !(0 != continueInDirection_~tmp~16#1); 6461294#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6462721#L2293-1 assume { :end_inline_continueInDirection } true; 6459640#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6459641#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6460680#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6462237#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6462238#L1336 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6472569#L1677-1 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6472567#L1340 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6472565#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6472563#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6472561#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6472559#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6472557#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6472554#L1006-2 assume !false; 6472555#L1007 [2021-12-06 20:43:18,733 INFO L793 eck$LassoCheckResult]: Loop: 6472555#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6498943#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6498926#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6498925#L1014 assume 1 != cleanup_~tmp___0~0#1; 6498923#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6498921#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6498915#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6498908#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6498898#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6498887#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6498886#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6498885#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6498884#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6498883#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6498882#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6498881#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6498880#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6498879#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6498878#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6498877#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6498875#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6498874#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6498860#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6498861#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6498847#L1685-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6498842#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6498839#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6498837#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6498834#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6498832#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6498831#L2580-3 assume !(1 == ~doorState~0); 6498819#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6498816#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6498812#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6498809#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6498806#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6498802#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6498799#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6498797#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6498795#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6498793#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6498791#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6498788#L1876-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6498785#L1882-2 assume !(~currentFloorID~0 < 0); 6498783#L1897-2 assume !(~currentFloorID~0 < 0); 6498780#L1910-2 assume !(~currentFloorID~0 < 1); 6498781#L1926-2 assume !(~currentFloorID~0 < 1); 6462510#L1939-2 assume ~currentFloorID~0 < 2; 6462511#L1941-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6506349#L275-36 assume !(0 == isFloorCalling_~floorID#1); 6506340#L279-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6495055#L302-36 stopRequestedInDirection__wrappee__weight_#t~ret36#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___2~3#1 := stopRequestedInDirection__wrappee__weight_#t~ret36#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret36#1; 6490328#L1945-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6490326#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6490324#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6490235#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6490236#L2277-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6490802#L854-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6486262#L2281-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 6486263#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6461790#L2293-7 assume { :end_inline_continueInDirection } true; 6460586#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6520022#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6520021#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6520020#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6520019#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6520018#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6520017#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6520016#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6520015#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6520014#L1006-2 assume !false; 6520009#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6520007#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6520006#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6520005#L1014 assume 1 != cleanup_~tmp___0~0#1; 6520003#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6520000#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6519995#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6519988#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6519983#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6519972#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6519971#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6519970#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6519969#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6519968#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6519967#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6519966#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6519965#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6519964#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6519963#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6519962#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6519193#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6461454#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6461455#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6500907#L1685-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6500881#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6500882#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6500864#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6500865#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6498523#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6498522#L2580-3 assume !(1 == ~doorState~0); 6498520#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6498519#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6498517#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6498516#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6498514#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6498512#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6498511#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6498507#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6498505#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6498504#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6498503#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6498472#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6498277#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6498276#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6498275#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6498273#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6498272#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6498271#L275-44 assume !(0 == isFloorCalling_~floorID#1); 6498267#L279-44 assume !(1 == isFloorCalling_~floorID#1); 6498261#L283-44 assume !(2 == isFloorCalling_~floorID#1); 6498247#L287-44 assume !(3 == isFloorCalling_~floorID#1); 6498245#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6498243#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6498241#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6498239#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6498237#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6498235#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6498233#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6498230#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6498228#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 6498227#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6498226#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6498225#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6498224#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6498199#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6490790#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 6490791#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6499036#L2293-9 assume { :end_inline_continueInDirection } true; 6499035#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6499034#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6499033#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6499032#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6499031#L1336-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6498559#L1677-6 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6499030#L1340-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6499029#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6499028#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6499027#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6499026#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6499025#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6499024#L1006-2 assume !false; 6472555#L1007 [2021-12-06 20:43:18,734 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:18,734 INFO L85 PathProgramCache]: Analyzing trace with hash -677919713, now seen corresponding path program 2 times [2021-12-06 20:43:18,734 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:18,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834986378] [2021-12-06 20:43:18,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:18,734 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:18,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:18,746 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:43:18,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:18,783 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:43:18,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:18,783 INFO L85 PathProgramCache]: Analyzing trace with hash -1902213612, now seen corresponding path program 1 times [2021-12-06 20:43:18,783 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:18,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [822340865] [2021-12-06 20:43:18,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:18,783 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:18,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:18,810 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2021-12-06 20:43:18,811 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:18,811 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [822340865] [2021-12-06 20:43:18,811 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [822340865] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:18,811 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:18,811 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:43:18,811 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [526810560] [2021-12-06 20:43:18,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:18,811 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:18,811 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:18,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 20:43:18,812 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:43:18,812 INFO L87 Difference]: Start difference. First operand 64953 states and 109192 transitions. cyclomatic complexity: 44250 Second operand has 7 states, 7 states have (on average 17.714285714285715) internal successors, (124), 7 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:19,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:19,701 INFO L93 Difference]: Finished difference Result 124012 states and 209288 transitions. [2021-12-06 20:43:19,702 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 20:43:19,702 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 124012 states and 209288 transitions. [2021-12-06 20:43:20,124 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 76856 [2021-12-06 20:43:20,438 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 124012 states to 124012 states and 209288 transitions. [2021-12-06 20:43:20,438 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 81960 [2021-12-06 20:43:20,491 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 81960 [2021-12-06 20:43:20,491 INFO L73 IsDeterministic]: Start isDeterministic. Operand 124012 states and 209288 transitions. [2021-12-06 20:43:20,491 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:20,491 INFO L681 BuchiCegarLoop]: Abstraction has 124012 states and 209288 transitions. [2021-12-06 20:43:20,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124012 states and 209288 transitions. [2021-12-06 20:43:21,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124012 to 64953. [2021-12-06 20:43:21,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64953 states, 64953 states have (on average 1.6801071544039536) internal successors, (109128), 64952 states have internal predecessors, (109128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:21,251 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64953 states to 64953 states and 109128 transitions. [2021-12-06 20:43:21,251 INFO L704 BuchiCegarLoop]: Abstraction has 64953 states and 109128 transitions. [2021-12-06 20:43:21,251 INFO L587 BuchiCegarLoop]: Abstraction has 64953 states and 109128 transitions. [2021-12-06 20:43:21,251 INFO L425 BuchiCegarLoop]: ======== Iteration 47============ [2021-12-06 20:43:21,251 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64953 states and 109128 transitions. [2021-12-06 20:43:21,389 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 39904 [2021-12-06 20:43:21,389 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:21,389 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:21,393 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:21,393 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:21,393 INFO L791 eck$LassoCheckResult]: Stem: 6649928#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6649929#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6650505#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6650506#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 6649291#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6649292#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6650796#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6651851#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6650304#L111 assume !(0 == getOrigin_~person#1); 6648550#L115 assume !(1 == getOrigin_~person#1); 6648551#L119 assume !(2 == getOrigin_~person#1); 6651798#L123 assume !(3 == getOrigin_~person#1); 6649213#L127 assume !(4 == getOrigin_~person#1); 6649214#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6651038#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6650324#L551 assume !(0 == initPersonOnFloor_~floor#1); 6650325#L578 assume 1 == initPersonOnFloor_~floor#1; 6650814#L579 assume !(0 == initPersonOnFloor_~person#1); 6649943#L582 assume !(1 == initPersonOnFloor_~person#1); 6649944#L585 assume !(2 == initPersonOnFloor_~person#1); 6650861#L588 assume !(3 == initPersonOnFloor_~person#1); 6651458#L591 assume !(4 == initPersonOnFloor_~person#1); 6650916#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6650917#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6649765#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6649766#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6648951#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6648952#L343 assume !(0 == callOnFloor_~floorID#1); 6650054#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6649477#L355-2 assume { :end_inline_callOnFloor } true; 6649478#L695 assume { :end_inline_initPersonOnFloor } true; 6650744#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6651745#L111-1 assume !(0 == getOrigin_~person#1); 6649394#L115-1 assume !(1 == getOrigin_~person#1); 6649395#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6649005#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6649006#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 6650558#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 6650818#L605-1 assume 2 == initPersonOnFloor_~floor#1; 6649118#L606-2 assume !(0 == initPersonOnFloor_~person#1); 6649119#L609-2 assume !(1 == initPersonOnFloor_~person#1); 6650965#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6651039#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6648840#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6648841#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6651331#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6649843#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6651654#L343-2 assume !(0 == callOnFloor_~floorID#1); 6648858#L346-2 assume !(1 == callOnFloor_~floorID#1); 6648859#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6651097#L355-5 assume { :end_inline_callOnFloor } true; 6650935#L695-1 assume { :end_inline_initPersonOnFloor } true; 6650936#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6651628#L275 assume !(0 == isFloorCalling_~floorID#1); 6651055#L279 assume !(1 == isFloorCalling_~floorID#1); 6651056#L283 assume !(2 == isFloorCalling_~floorID#1); 6651290#L287 assume !(3 == isFloorCalling_~floorID#1); 6650423#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6649102#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6649047#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6649048#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6650991#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6651748#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6650085#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6650086#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6649158#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6649159#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6650148#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6651991#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6651990#L2489 assume !(0 != timeShift_~tmp___9~2#1); 6649256#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 6649257#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6648691#L275-3 assume !(0 == isFloorCalling_~floorID#1); 6648692#L279-3 assume !(1 == isFloorCalling_~floorID#1); 6651423#L283-3 assume !(2 == isFloorCalling_~floorID#1); 6651468#L287-3 assume !(3 == isFloorCalling_~floorID#1); 6650289#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6650290#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6649746#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6649747#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6648622#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6648623#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6651651#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6651834#L1882 assume !(~currentFloorID~0 < 0); 6651424#L1897 assume !(~currentFloorID~0 < 0); 6650751#L1910 assume ~currentFloorID~0 < 1; 6650752#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6649001#L275-5 assume !(0 == isFloorCalling_~floorID#1); 6649002#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6650647#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 6651402#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6650166#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6651683#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6651997#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6651257#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6649039#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6649040#L2281 assume !(0 != continueInDirection_~tmp~16#1); 6650294#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6651716#L2293-1 assume { :end_inline_continueInDirection } true; 6648648#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6648649#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6649681#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6651228#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6651229#L1336 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6651938#L1677-1 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6651939#L1340 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6651469#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6649582#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6648748#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6648749#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6651334#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6651335#L1006-2 assume !false; 6664070#L1007 [2021-12-06 20:43:21,394 INFO L793 eck$LassoCheckResult]: Loop: 6664070#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6700582#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6699094#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6699092#L1014 assume 1 != cleanup_~tmp___0~0#1; 6699090#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6699086#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6699084#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6699034#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6698981#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6698955#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6698951#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6698947#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6698943#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6698939#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6698935#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6698931#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6698927#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6698922#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6698918#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6698904#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6698899#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6698900#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6700579#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6703024#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6691912#L1685-3 assume !(0 == buttonForFloorIsPressed_~floorID#1); 6691913#L1689-3 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6691890#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6691891#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6691879#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6691880#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6691871#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6691872#L2580-3 assume !(1 == ~doorState~0); 6695348#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6695347#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6695346#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6695345#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6695344#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6695343#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6695342#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6695341#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6695340#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6695339#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6695338#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6695337#L1876-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6695336#L1882-2 assume !(~currentFloorID~0 < 0); 6695335#L1897-2 assume !(~currentFloorID~0 < 0); 6695334#L1910-2 assume !(~currentFloorID~0 < 1); 6695333#L1926-2 assume !(~currentFloorID~0 < 1); 6695332#L1939-2 assume ~currentFloorID~0 < 2; 6695331#L1941-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6695329#L275-36 assume !(0 == isFloorCalling_~floorID#1); 6688956#L279-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6688953#L302-36 stopRequestedInDirection__wrappee__weight_#t~ret36#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___2~3#1 := stopRequestedInDirection__wrappee__weight_#t~ret36#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret36#1; 6688699#L1945-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6688700#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6687540#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6687541#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6687533#L2277-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6687534#L854-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6687282#L2281-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 6651388#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6651389#L2293-7 assume { :end_inline_continueInDirection } true; 6706800#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6706799#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6706798#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6706797#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6706796#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6706795#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6706794#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6706793#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6706792#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6706791#L1006-2 assume !false; 6706790#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6706789#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6706788#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6706787#L1014 assume 1 != cleanup_~tmp___0~0#1; 6706785#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6706782#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6706777#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6706766#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6706760#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6706749#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6706748#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6706747#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6706746#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6706745#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6706744#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6706743#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6706742#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6706740#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6706739#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6706738#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6706731#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6706717#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6706716#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6706714#L1685-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6705989#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6705987#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6705984#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6705981#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6705982#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6705975#L2580-3 assume !(1 == ~doorState~0); 6705968#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6705967#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6651124#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6648921#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6648922#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6648993#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6649850#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6649202#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6649203#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6648391#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6648392#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6651278#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6649703#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6649602#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6648503#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6648504#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6650295#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6650296#L275-44 assume !(0 == isFloorCalling_~floorID#1); 6650910#L279-44 assume !(1 == isFloorCalling_~floorID#1); 6650911#L283-44 assume !(2 == isFloorCalling_~floorID#1); 6650098#L287-44 assume !(3 == isFloorCalling_~floorID#1); 6650099#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6650314#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6650523#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6650524#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6651283#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6650955#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6650956#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6651559#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6649816#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 6649817#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6651936#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6650071#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6648449#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6648450#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6649694#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 6676936#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6704325#L2293-9 assume { :end_inline_continueInDirection } true; 6704324#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6704323#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6704296#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6704287#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6704276#L1336-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6699220#L1677-6 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6704266#L1340-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6704259#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6704254#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6704239#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6704223#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6704219#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6704215#L1006-2 assume !false; 6664070#L1007 [2021-12-06 20:43:21,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:21,394 INFO L85 PathProgramCache]: Analyzing trace with hash -677919713, now seen corresponding path program 3 times [2021-12-06 20:43:21,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:21,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1420442671] [2021-12-06 20:43:21,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:21,394 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:21,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:21,406 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:43:21,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:21,441 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:43:21,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:21,442 INFO L85 PathProgramCache]: Analyzing trace with hash 784250795, now seen corresponding path program 1 times [2021-12-06 20:43:21,442 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:21,442 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226799432] [2021-12-06 20:43:21,442 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:21,442 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:21,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:21,459 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-06 20:43:21,460 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:21,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [226799432] [2021-12-06 20:43:21,460 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [226799432] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:21,460 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:21,460 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:43:21,460 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [29725669] [2021-12-06 20:43:21,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:21,460 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:21,460 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:21,460 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 20:43:21,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:43:21,461 INFO L87 Difference]: Start difference. First operand 64953 states and 109128 transitions. cyclomatic complexity: 44186 Second operand has 3 states, 3 states have (on average 47.333333333333336) internal successors, (142), 3 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:21,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:21,805 INFO L93 Difference]: Finished difference Result 94380 states and 159189 transitions. [2021-12-06 20:43:21,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 20:43:21,806 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 94380 states and 159189 transitions. [2021-12-06 20:43:22,103 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 57990 [2021-12-06 20:43:22,334 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 94380 states to 94380 states and 159189 transitions. [2021-12-06 20:43:22,334 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61409 [2021-12-06 20:43:22,374 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61409 [2021-12-06 20:43:22,374 INFO L73 IsDeterministic]: Start isDeterministic. Operand 94380 states and 159189 transitions. [2021-12-06 20:43:22,374 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:22,374 INFO L681 BuchiCegarLoop]: Abstraction has 94380 states and 159189 transitions. [2021-12-06 20:43:22,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94380 states and 159189 transitions. [2021-12-06 20:43:22,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94380 to 64541. [2021-12-06 20:43:22,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64541 states, 64541 states have (on average 1.6748733363288453) internal successors, (108098), 64540 states have internal predecessors, (108098), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:23,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64541 states to 64541 states and 108098 transitions. [2021-12-06 20:43:23,033 INFO L704 BuchiCegarLoop]: Abstraction has 64541 states and 108098 transitions. [2021-12-06 20:43:23,033 INFO L587 BuchiCegarLoop]: Abstraction has 64541 states and 108098 transitions. [2021-12-06 20:43:23,033 INFO L425 BuchiCegarLoop]: ======== Iteration 48============ [2021-12-06 20:43:23,033 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64541 states and 108098 transitions. [2021-12-06 20:43:23,165 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 39684 [2021-12-06 20:43:23,165 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:23,165 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:23,169 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:23,169 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:23,170 INFO L791 eck$LassoCheckResult]: Stem: 6809239#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6809240#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6809818#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6809819#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 6808603#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6808604#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6810123#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6811144#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6809612#L111 assume !(0 == getOrigin_~person#1); 6807883#L115 assume !(1 == getOrigin_~person#1); 6807884#L119 assume !(2 == getOrigin_~person#1); 6811102#L123 assume !(3 == getOrigin_~person#1); 6808527#L127 assume !(4 == getOrigin_~person#1); 6808528#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6810367#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6809631#L551 assume !(0 == initPersonOnFloor_~floor#1); 6809632#L578 assume 1 == initPersonOnFloor_~floor#1; 6810141#L579 assume !(0 == initPersonOnFloor_~person#1); 6809252#L582 assume !(1 == initPersonOnFloor_~person#1); 6809253#L585 assume !(2 == initPersonOnFloor_~person#1); 6810181#L588 assume !(3 == initPersonOnFloor_~person#1); 6810785#L591 assume !(4 == initPersonOnFloor_~person#1); 6810239#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6810240#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6809080#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6809081#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6808272#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6808273#L343 assume !(0 == callOnFloor_~floorID#1); 6809366#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6808785#L355-2 assume { :end_inline_callOnFloor } true; 6808786#L695 assume { :end_inline_initPersonOnFloor } true; 6810067#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6811051#L111-1 assume !(0 == getOrigin_~person#1); 6808704#L115-1 assume !(1 == getOrigin_~person#1); 6808705#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6808328#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6808329#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 6809876#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 6810142#L605-1 assume 2 == initPersonOnFloor_~floor#1; 6808437#L606-2 assume !(0 == initPersonOnFloor_~person#1); 6808438#L609-2 assume !(1 == initPersonOnFloor_~person#1); 6810289#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6810368#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6808164#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6808165#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6810668#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6809154#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6810967#L343-2 assume !(0 == callOnFloor_~floorID#1); 6808182#L346-2 assume !(1 == callOnFloor_~floorID#1); 6808183#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6810427#L355-5 assume { :end_inline_callOnFloor } true; 6810257#L695-1 assume { :end_inline_initPersonOnFloor } true; 6810258#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6810947#L275 assume !(0 == isFloorCalling_~floorID#1); 6810382#L279 assume !(1 == isFloorCalling_~floorID#1); 6810383#L283 assume !(2 == isFloorCalling_~floorID#1); 6810623#L287 assume !(3 == isFloorCalling_~floorID#1); 6809731#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6808424#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6808369#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6808370#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6810315#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6811054#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6809394#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6809395#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6808473#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6808474#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6809461#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6811274#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6811273#L2489 assume !(0 != timeShift_~tmp___9~2#1); 6808568#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 6808569#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6808019#L275-3 assume !(0 == isFloorCalling_~floorID#1); 6808020#L279-3 assume !(1 == isFloorCalling_~floorID#1); 6810750#L283-3 assume !(2 == isFloorCalling_~floorID#1); 6810797#L287-3 assume !(3 == isFloorCalling_~floorID#1); 6809597#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6809598#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6809060#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6809061#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6807955#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6807956#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6810966#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6811129#L1882 assume !(~currentFloorID~0 < 0); 6810751#L1897 assume !(~currentFloorID~0 < 0); 6810076#L1910 assume ~currentFloorID~0 < 1; 6810077#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6808318#L275-5 assume !(0 == isFloorCalling_~floorID#1); 6808319#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6809961#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 6810730#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6809479#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6810994#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6811275#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6810584#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6808361#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6808362#L2281 assume !(0 != continueInDirection_~tmp~16#1); 6809602#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6811023#L2293-1 assume { :end_inline_continueInDirection } true; 6807977#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6807978#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6808995#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6810556#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6809732#L1336 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6809733#L1677-1 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6809058#L1340 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6809059#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6808893#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6808894#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6818584#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6818581#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6818561#L1006-2 assume !false; 6818562#L1007 [2021-12-06 20:43:23,170 INFO L793 eck$LassoCheckResult]: Loop: 6818562#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6867147#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6867143#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6867074#L1014 assume 1 != cleanup_~tmp___0~0#1; 6867063#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6867058#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6867051#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6867042#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6867034#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6867013#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6866938#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6866814#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6866813#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6866806#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6866792#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6866785#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6866784#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6866783#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6866782#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6866781#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6866779#L275-32 assume !(0 == isFloorCalling_~floorID#1); 6866778#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6866770#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6866771#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6863736#L1685-3 assume !(0 == buttonForFloorIsPressed_~floorID#1); 6863731#L1689-3 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6863726#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6863723#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6863721#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6863719#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6863716#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6863715#L2580-3 assume !(1 == ~doorState~0); 6863071#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6863070#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6863069#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6863068#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6863067#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6863066#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6863065#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6863064#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6863063#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6863062#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6863061#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6863060#L1876-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6863059#L1882-2 assume !(~currentFloorID~0 < 0); 6863058#L1897-2 assume !(~currentFloorID~0 < 0); 6863057#L1910-2 assume !(~currentFloorID~0 < 1); 6863056#L1926-2 assume !(~currentFloorID~0 < 1); 6863055#L1939-2 assume ~currentFloorID~0 < 2; 6863054#L1941-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6863053#L275-36 assume !(0 == isFloorCalling_~floorID#1); 6863052#L279-36 assume !(1 == isFloorCalling_~floorID#1); 6854375#L283-36 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6854376#L302-36 stopRequestedInDirection__wrappee__weight_#t~ret36#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___2~3#1 := stopRequestedInDirection__wrappee__weight_#t~ret36#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret36#1; 6854349#L1945-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6854338#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6854330#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6854321#L2588-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6854311#L2277-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6854304#L854-6 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6809054#L2281-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 6809055#L2287-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6810102#L2293-7 assume { :end_inline_continueInDirection } true; 6808902#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6867968#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6867964#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867961#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867959#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867947#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867922#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867913#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6867911#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6867909#L1006-2 assume !false; 6867907#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6867905#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 6867900#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6867892#L1014 assume 1 != cleanup_~tmp___0~0#1; 6867889#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6867886#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6867880#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 6867872#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 6867866#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6867806#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 6867804#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6867797#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6867796#L275-30 assume !(0 == isFloorCalling_~floorID#1); 6867795#L279-30 assume !(1 == isFloorCalling_~floorID#1); 6867794#L283-30 assume !(2 == isFloorCalling_~floorID#1); 6867793#L287-30 assume !(3 == isFloorCalling_~floorID#1); 6867791#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6867789#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6867787#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6867785#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6867782#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6867780#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6867778#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6867775#L1685-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6867770#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6867768#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6867747#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6866762#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6866763#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 6811012#L2580-3 assume !(1 == ~doorState~0); 6811013#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6811219#L275-33 assume !(0 == isFloorCalling_~floorID#1); 6811220#L279-33 assume !(1 == isFloorCalling_~floorID#1); 6808242#L283-33 assume !(2 == isFloorCalling_~floorID#1); 6808243#L287-33 assume !(3 == isFloorCalling_~floorID#1); 6809664#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6809665#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6808516#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6808517#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6807728#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6807729#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6810608#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6810609#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6866848#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6866849#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6866843#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6866844#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6866788#L275-44 assume !(0 == isFloorCalling_~floorID#1); 6866789#L279-44 assume !(1 == isFloorCalling_~floorID#1); 6865057#L283-44 assume !(2 == isFloorCalling_~floorID#1); 6865058#L287-44 assume !(3 == isFloorCalling_~floorID#1); 6865047#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6865048#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6867023#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6811196#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6811197#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6810278#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6810279#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6867022#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6867021#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 6867020#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6867019#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6867018#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6867017#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6867016#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6813065#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 6813066#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6867740#L2293-9 assume { :end_inline_continueInDirection } true; 6867739#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6867738#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6867737#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867736#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6867735#L1336-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6862616#L1677-6 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6867734#L1340-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6867733#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867732#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867731#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6867730#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6867728#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6867727#L1006-2 assume !false; 6818562#L1007 [2021-12-06 20:43:23,170 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:23,170 INFO L85 PathProgramCache]: Analyzing trace with hash -677919713, now seen corresponding path program 4 times [2021-12-06 20:43:23,170 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:23,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468707021] [2021-12-06 20:43:23,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:23,171 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:23,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:23,183 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:43:23,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:23,217 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:43:23,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:23,218 INFO L85 PathProgramCache]: Analyzing trace with hash -1071922588, now seen corresponding path program 1 times [2021-12-06 20:43:23,218 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:23,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1283377688] [2021-12-06 20:43:23,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:23,218 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:23,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:23,245 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 38 proven. 2 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-12-06 20:43:23,245 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:23,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1283377688] [2021-12-06 20:43:23,245 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1283377688] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 20:43:23,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1122716107] [2021-12-06 20:43:23,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:23,245 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 20:43:23,245 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:43:23,246 INFO L229 MonitoredProcess]: Starting monitored process 67 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 20:43:23,246 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99556ce4-f1dd-493b-8ca0-d01d9eba37f7/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (67)] Waiting until timeout for monitored process [2021-12-06 20:43:23,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:23,329 INFO L263 TraceCheckSpWp]: Trace formula consists of 559 conjuncts, 6 conjunts are in the unsatisfiable core [2021-12-06 20:43:23,331 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 20:43:23,460 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:23,460 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 20:43:23,460 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1122716107] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:23,460 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 20:43:23,460 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2021-12-06 20:43:23,460 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1319759100] [2021-12-06 20:43:23,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:23,461 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:23,461 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:23,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:43:23,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-06 20:43:23,461 INFO L87 Difference]: Start difference. First operand 64541 states and 108098 transitions. cyclomatic complexity: 43568 Second operand has 5 states, 5 states have (on average 30.8) internal successors, (154), 5 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:23,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:23,875 INFO L93 Difference]: Finished difference Result 117683 states and 198619 transitions. [2021-12-06 20:43:23,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 20:43:23,876 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117683 states and 198619 transitions. [2021-12-06 20:43:24,272 INFO L131 ngComponentsAnalysis]: Automaton has 26 accepting balls. 70568 [2021-12-06 20:43:24,574 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117683 states to 115679 states and 195260 transitions. [2021-12-06 20:43:24,574 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 75343 [2021-12-06 20:43:24,622 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 75353 [2021-12-06 20:43:24,623 INFO L73 IsDeterministic]: Start isDeterministic. Operand 115679 states and 195260 transitions. [2021-12-06 20:43:24,623 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:24,623 INFO L681 BuchiCegarLoop]: Abstraction has 115679 states and 195260 transitions. [2021-12-06 20:43:24,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115679 states and 195260 transitions. [2021-12-06 20:43:25,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115679 to 88013. [2021-12-06 20:43:25,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88013 states, 88013 states have (on average 1.6795018917659892) internal successors, (147818), 88012 states have internal predecessors, (147818), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:25,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88013 states to 88013 states and 147818 transitions. [2021-12-06 20:43:25,488 INFO L704 BuchiCegarLoop]: Abstraction has 88013 states and 147818 transitions. [2021-12-06 20:43:25,488 INFO L587 BuchiCegarLoop]: Abstraction has 88013 states and 147818 transitions. [2021-12-06 20:43:25,488 INFO L425 BuchiCegarLoop]: ======== Iteration 49============ [2021-12-06 20:43:25,488 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 88013 states and 147818 transitions. [2021-12-06 20:43:25,672 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 52497 [2021-12-06 20:43:25,672 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:25,672 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:25,675 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:25,676 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:25,676 INFO L791 eck$LassoCheckResult]: Stem: 6991959#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6991960#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6992548#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6992549#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 6991312#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6991313#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6992862#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6993923#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6992335#L111 assume !(0 == getOrigin_~person#1); 6990585#L115 assume !(1 == getOrigin_~person#1); 6990586#L119 assume !(2 == getOrigin_~person#1); 6993866#L123 assume !(3 == getOrigin_~person#1); 6991237#L127 assume !(4 == getOrigin_~person#1); 6991238#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6993114#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6992355#L551 assume !(0 == initPersonOnFloor_~floor#1); 6992356#L578 assume 1 == initPersonOnFloor_~floor#1; 6992885#L579 assume !(0 == initPersonOnFloor_~person#1); 6991973#L582 assume !(1 == initPersonOnFloor_~person#1); 6991974#L585 assume !(2 == initPersonOnFloor_~person#1); 6992929#L588 assume !(3 == initPersonOnFloor_~person#1); 6993531#L591 assume !(4 == initPersonOnFloor_~person#1); 6992986#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6992987#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6991794#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6991795#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6990977#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6990978#L343 assume !(0 == callOnFloor_~floorID#1); 6992084#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6991495#L355-2 assume { :end_inline_callOnFloor } true; 6991496#L695 assume { :end_inline_initPersonOnFloor } true; 6992802#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 6993815#L111-1 assume !(0 == getOrigin_~person#1); 6991415#L115-1 assume !(1 == getOrigin_~person#1); 6991416#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6991032#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6991033#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 6992602#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 6992886#L605-1 assume 2 == initPersonOnFloor_~floor#1; 6991141#L606-2 assume !(0 == initPersonOnFloor_~person#1); 6991142#L609-2 assume !(1 == initPersonOnFloor_~person#1); 6993036#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6993115#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6990868#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6990869#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6993416#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6991873#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6993720#L343-2 assume !(0 == callOnFloor_~floorID#1); 6990886#L346-2 assume !(1 == callOnFloor_~floorID#1); 6990887#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6993169#L355-5 assume { :end_inline_callOnFloor } true; 6993005#L695-1 assume { :end_inline_initPersonOnFloor } true; 6993006#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6993699#L275 assume !(0 == isFloorCalling_~floorID#1); 6993126#L279 assume !(1 == isFloorCalling_~floorID#1); 6993127#L283 assume !(2 == isFloorCalling_~floorID#1); 6993371#L287 assume !(3 == isFloorCalling_~floorID#1); 6992459#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6991128#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6991073#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 6991074#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6993063#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6993818#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 6992112#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6992113#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 6991181#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 6991182#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 6991939#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 6991940#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 6994071#L2489 assume !(0 != timeShift_~tmp___9~2#1); 6991277#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 6991278#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6990720#L275-3 assume !(0 == isFloorCalling_~floorID#1); 6990721#L279-3 assume !(1 == isFloorCalling_~floorID#1); 6993499#L283-3 assume !(2 == isFloorCalling_~floorID#1); 6993544#L287-3 assume !(3 == isFloorCalling_~floorID#1); 6992320#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6992321#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 6991776#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 6991777#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 6990657#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6990658#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6993719#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 6993899#L1882 assume !(~currentFloorID~0 < 0); 6993500#L1897 assume !(~currentFloorID~0 < 0); 6992813#L1910 assume ~currentFloorID~0 < 1; 6992814#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 6991022#L275-5 assume !(0 == isFloorCalling_~floorID#1); 6991023#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 6992694#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 6993477#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6992197#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6993751#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 6994072#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6993328#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6991065#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6991066#L2281 assume !(0 != continueInDirection_~tmp~16#1); 6992326#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6993785#L2293-1 assume { :end_inline_continueInDirection } true; 6990679#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 6990680#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 6991707#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6993296#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6992460#L1336 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 6992461#L1677-1 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 6991774#L1340 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6991775#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7004380#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7004381#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7005395#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7005393#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 7005389#L1006-2 assume !false; 7005390#L1007 [2021-12-06 20:43:25,676 INFO L793 eck$LassoCheckResult]: Loop: 7005390#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7048620#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 7048619#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7048618#L1014 assume 1 != cleanup_~tmp___0~0#1; 7048616#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7048613#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7048607#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 7048599#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 7048593#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 7048582#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7048581#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7048580#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7048579#L275-30 assume !(0 == isFloorCalling_~floorID#1); 7048578#L279-30 assume !(1 == isFloorCalling_~floorID#1); 7048577#L283-30 assume !(2 == isFloorCalling_~floorID#1); 7048576#L287-30 assume !(3 == isFloorCalling_~floorID#1); 7048575#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7048574#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7048573#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7048572#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7048570#L275-32 assume !(0 == isFloorCalling_~floorID#1); 7048569#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7048566#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7053327#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 7048363#L1685-3 assume !(0 == buttonForFloorIsPressed_~floorID#1); 7048361#L1689-3 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7048353#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 7048351#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7048349#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 7048347#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7048345#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 7048316#L2580-3 assume !(1 == ~doorState~0); 7048314#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7048313#L275-33 assume !(0 == isFloorCalling_~floorID#1); 7048312#L279-33 assume !(1 == isFloorCalling_~floorID#1); 7048311#L283-33 assume !(2 == isFloorCalling_~floorID#1); 7048310#L287-33 assume !(3 == isFloorCalling_~floorID#1); 7048309#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7048308#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7048307#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7048306#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7048305#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7048304#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7048303#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7048271#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7053218#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 7053136#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 7048261#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 7053126#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7053118#L275-44 assume !(0 == isFloorCalling_~floorID#1); 7053115#L279-44 assume !(1 == isFloorCalling_~floorID#1); 7053114#L283-44 assume !(2 == isFloorCalling_~floorID#1); 7053101#L287-44 assume !(3 == isFloorCalling_~floorID#1); 7053097#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7048680#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7048679#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7048676#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7048673#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6993025#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 6993026#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 6990512#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 6993636#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 7038210#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 7038211#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6992101#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6992102#L2277-4 assume !(1 == ~currentHeading~0); 6992420#L2287-12 assume !(0 == ~currentFloorID~0); 6992421#L2287-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7059146#L2293-9 assume { :end_inline_continueInDirection } true; 7059145#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7059144#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 7059143#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7059142#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 7059141#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7059140#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7059139#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7059138#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7059137#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7059136#L1006-2 assume !false; 7059135#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7059134#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 7059133#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7059132#L1014 assume 1 != cleanup_~tmp___0~0#1; 7059130#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7059127#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7059121#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 7059113#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 7059107#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 7059096#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7059095#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7059094#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7059093#L275-30 assume !(0 == isFloorCalling_~floorID#1); 7059092#L279-30 assume !(1 == isFloorCalling_~floorID#1); 7059091#L283-30 assume !(2 == isFloorCalling_~floorID#1); 7059090#L287-30 assume !(3 == isFloorCalling_~floorID#1); 7059089#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7059088#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7059087#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7059086#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7059084#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7059083#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7059082#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 7054697#L1685-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7054698#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 7064789#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7064787#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 7064785#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7064775#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 7057414#L2580-3 assume !(1 == ~doorState~0); 7057411#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7057409#L275-33 assume !(0 == isFloorCalling_~floorID#1); 7057407#L279-33 assume !(1 == isFloorCalling_~floorID#1); 7057403#L283-33 assume !(2 == isFloorCalling_~floorID#1); 7057401#L287-33 assume !(3 == isFloorCalling_~floorID#1); 7057398#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7057395#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7057393#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7057391#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7057388#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7057384#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7057377#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7057368#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7057363#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 7057362#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 7057348#L2363-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 7057346#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7057344#L275-44 assume !(0 == isFloorCalling_~floorID#1); 7057342#L279-44 assume !(1 == isFloorCalling_~floorID#1); 7056885#L283-44 assume !(2 == isFloorCalling_~floorID#1); 7056884#L287-44 assume !(3 == isFloorCalling_~floorID#1); 7056883#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7056882#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7056881#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7056880#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7056879#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7056877#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7056875#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7056874#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7056873#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 6994011#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 6994012#L2363-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~23#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 6994059#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6990484#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 6990485#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 6991720#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 6993408#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7048651#L2293-9 assume { :end_inline_continueInDirection } true; 7048645#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7048641#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 7048637#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7048633#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 7048629#L1336-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 7048628#L1677-6 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 7048627#L1340-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 7048626#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7048625#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7048624#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7048623#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7048622#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7048621#L1006-2 assume !false; 7005390#L1007 [2021-12-06 20:43:25,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:25,677 INFO L85 PathProgramCache]: Analyzing trace with hash -677919713, now seen corresponding path program 5 times [2021-12-06 20:43:25,677 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:25,677 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1089170955] [2021-12-06 20:43:25,677 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:25,677 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:25,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:25,689 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:43:25,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:25,722 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:43:25,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:25,722 INFO L85 PathProgramCache]: Analyzing trace with hash 692095963, now seen corresponding path program 1 times [2021-12-06 20:43:25,723 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:25,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061679710] [2021-12-06 20:43:25,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:25,723 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:25,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:25,759 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-12-06 20:43:25,759 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:25,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061679710] [2021-12-06 20:43:25,759 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061679710] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:25,759 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:25,759 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 20:43:25,759 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [843109626] [2021-12-06 20:43:25,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:25,759 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:25,760 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:25,760 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 20:43:25,760 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-06 20:43:25,760 INFO L87 Difference]: Start difference. First operand 88013 states and 147818 transitions. cyclomatic complexity: 59825 Second operand has 8 states, 8 states have (on average 16.625) internal successors, (133), 8 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:26,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:26,888 INFO L93 Difference]: Finished difference Result 288246 states and 488550 transitions. [2021-12-06 20:43:26,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-06 20:43:26,888 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 288246 states and 488550 transitions. [2021-12-06 20:43:29,040 INFO L131 ngComponentsAnalysis]: Automaton has 53 accepting balls. 171936 [2021-12-06 20:43:29,644 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 288246 states to 288246 states and 488550 transitions. [2021-12-06 20:43:29,645 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 181458 [2021-12-06 20:43:29,734 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 181458 [2021-12-06 20:43:29,734 INFO L73 IsDeterministic]: Start isDeterministic. Operand 288246 states and 488550 transitions. [2021-12-06 20:43:29,736 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:29,736 INFO L681 BuchiCegarLoop]: Abstraction has 288246 states and 488550 transitions. [2021-12-06 20:43:29,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288246 states and 488550 transitions. [2021-12-06 20:43:31,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288246 to 106097. [2021-12-06 20:43:31,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106097 states, 106097 states have (on average 1.6796987662233616) internal successors, (178211), 106096 states have internal predecessors, (178211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:31,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106097 states to 106097 states and 178211 transitions. [2021-12-06 20:43:31,351 INFO L704 BuchiCegarLoop]: Abstraction has 106097 states and 178211 transitions. [2021-12-06 20:43:31,351 INFO L587 BuchiCegarLoop]: Abstraction has 106097 states and 178211 transitions. [2021-12-06 20:43:31,351 INFO L425 BuchiCegarLoop]: ======== Iteration 50============ [2021-12-06 20:43:31,351 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106097 states and 178211 transitions. [2021-12-06 20:43:31,703 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 62005 [2021-12-06 20:43:31,703 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:31,703 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:31,706 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:31,707 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:31,707 INFO L791 eck$LassoCheckResult]: Stem: 7368288#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 7368289#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 7368869#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7368870#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 7367638#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 7367639#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 7369179#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 7370210#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 7368662#L111 assume !(0 == getOrigin_~person#1); 7366912#L115 assume !(1 == getOrigin_~person#1); 7366913#L119 assume !(2 == getOrigin_~person#1); 7370162#L123 assume !(3 == getOrigin_~person#1); 7367560#L127 assume !(4 == getOrigin_~person#1); 7367561#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 7369413#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7368680#L551 assume !(0 == initPersonOnFloor_~floor#1); 7368681#L578 assume 1 == initPersonOnFloor_~floor#1; 7369197#L579 assume !(0 == initPersonOnFloor_~person#1); 7368301#L582 assume !(1 == initPersonOnFloor_~person#1); 7368302#L585 assume !(2 == initPersonOnFloor_~person#1); 7369239#L588 assume !(3 == initPersonOnFloor_~person#1); 7369833#L591 assume !(4 == initPersonOnFloor_~person#1); 7369294#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 7369295#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7368126#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7368127#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 7367300#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7367301#L343 assume !(0 == callOnFloor_~floorID#1); 7368413#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 7367822#L355-2 assume { :end_inline_callOnFloor } true; 7367823#L695 assume { :end_inline_initPersonOnFloor } true; 7369120#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 7370105#L111-1 assume !(0 == getOrigin_~person#1); 7367740#L115-1 assume !(1 == getOrigin_~person#1); 7367741#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 7367356#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7367357#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 7368925#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 7369201#L605-1 assume 2 == initPersonOnFloor_~floor#1; 7367465#L606-2 assume !(0 == initPersonOnFloor_~person#1); 7367466#L609-2 assume !(1 == initPersonOnFloor_~person#1); 7369334#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 7369414#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7367192#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7367193#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 7369708#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 7368202#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7370018#L343-2 assume !(0 == callOnFloor_~floorID#1); 7367210#L346-2 assume !(1 == callOnFloor_~floorID#1); 7367211#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 7369462#L355-5 assume { :end_inline_callOnFloor } true; 7369309#L695-1 assume { :end_inline_initPersonOnFloor } true; 7369310#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7369994#L275 assume !(0 == isFloorCalling_~floorID#1); 7369426#L279 assume !(1 == isFloorCalling_~floorID#1); 7369427#L283 assume !(2 == isFloorCalling_~floorID#1); 7369661#L287 assume !(3 == isFloorCalling_~floorID#1); 7368780#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7367452#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7367397#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7367398#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7369360#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7370108#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7368446#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 7368447#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7367503#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 7367504#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7368272#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 7368273#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7370329#L2489 assume !(0 != timeShift_~tmp___9~2#1); 7367603#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 7367604#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7367049#L275-3 assume !(0 == isFloorCalling_~floorID#1); 7367050#L279-3 assume !(1 == isFloorCalling_~floorID#1); 7369800#L283-3 assume !(2 == isFloorCalling_~floorID#1); 7369844#L287-3 assume !(3 == isFloorCalling_~floorID#1); 7368647#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7368648#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7368106#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7368107#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7366985#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7366986#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7370015#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 7370191#L1882 assume !(~currentFloorID~0 < 0); 7369801#L1897 assume !(~currentFloorID~0 < 0); 7369127#L1910 assume ~currentFloorID~0 < 1; 7369128#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7367352#L275-5 assume !(0 == isFloorCalling_~floorID#1); 7367353#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7369020#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 7369780#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7368526#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7370045#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 7370330#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 7369618#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7367389#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 7367390#L2281 assume !(0 != continueInDirection_~tmp~16#1); 7368653#L2287-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7370073#L2293-1 assume { :end_inline_continueInDirection } true; 7367007#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7367008#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 7368036#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7369589#L1334 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 7369590#L1336 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 7370288#L1677-1 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 7370289#L1340 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 7371229#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7371226#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7371223#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7371220#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7371217#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 7371214#L1006-2 assume !false; 7371215#L1007 [2021-12-06 20:43:31,707 INFO L793 eck$LassoCheckResult]: Loop: 7371215#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7423485#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 7423484#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7423483#L1014 assume 1 != cleanup_~tmp___0~0#1; 7423481#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7423478#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7423472#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 7423464#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 7423458#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 7423447#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7423446#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7423445#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7423444#L275-30 assume !(0 == isFloorCalling_~floorID#1); 7423443#L279-30 assume !(1 == isFloorCalling_~floorID#1); 7423442#L283-30 assume !(2 == isFloorCalling_~floorID#1); 7423441#L287-30 assume !(3 == isFloorCalling_~floorID#1); 7423440#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7423439#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7423438#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7423437#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7423435#L275-32 assume !(0 == isFloorCalling_~floorID#1); 7423434#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7423428#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7423429#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 7422707#L1685-3 assume !(0 == buttonForFloorIsPressed_~floorID#1); 7422706#L1689-3 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7422702#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 7422700#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7422699#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 7422698#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7422695#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 7422696#L2580-3 assume !(1 == ~doorState~0); 7427073#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7427072#L275-33 assume !(0 == isFloorCalling_~floorID#1); 7427071#L279-33 assume !(1 == isFloorCalling_~floorID#1); 7427070#L283-33 assume !(2 == isFloorCalling_~floorID#1); 7427069#L287-33 assume !(3 == isFloorCalling_~floorID#1); 7427068#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7427067#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7427066#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7427065#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7427064#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7427063#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7422606#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7422607#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7427052#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 7411160#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 7411159#L2363-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~23#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 7411158#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7411157#L275-44 assume !(0 == isFloorCalling_~floorID#1); 7411152#L279-44 assume !(1 == isFloorCalling_~floorID#1); 7411139#L283-44 assume !(2 == isFloorCalling_~floorID#1); 7411137#L287-44 assume !(3 == isFloorCalling_~floorID#1); 7411134#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7411072#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7411067#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7409744#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7409726#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7409340#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7409341#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7424425#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7424424#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 7424423#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 7424422#L2363-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~23#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 7424421#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 7424420#L2277-4 assume !(1 == ~currentHeading~0); 7424419#L2287-12 assume !(0 == ~currentFloorID~0); 7424418#L2287-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7424417#L2293-9 assume { :end_inline_continueInDirection } true; 7424416#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7424415#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 7424414#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7424413#L1334-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 7424412#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7424411#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7424410#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7424409#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7424408#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7424407#L1006-2 assume !false; 7424406#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7424405#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 7424404#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7424403#L1014 assume 1 != cleanup_~tmp___0~0#1; 7424401#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7424398#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7424392#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 7424384#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 7424378#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 7424367#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7424366#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7424365#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7424364#L275-30 assume !(0 == isFloorCalling_~floorID#1); 7424363#L279-30 assume !(1 == isFloorCalling_~floorID#1); 7424359#L283-30 assume !(2 == isFloorCalling_~floorID#1); 7424327#L287-30 assume !(3 == isFloorCalling_~floorID#1); 7424325#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7424319#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7424317#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7424315#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7424307#L275-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7424305#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7424298#L2310-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 7424294#L1685-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7423609#L1706-3 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 7423606#L2317-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7423603#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 7423599#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7423600#L2489-2 assume !(0 != timeShift_~tmp___9~2#1); 7423593#L2580-3 assume !(1 == ~doorState~0); 7423588#L2580-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7423585#L275-33 assume !(0 == isFloorCalling_~floorID#1); 7423583#L279-33 assume !(1 == isFloorCalling_~floorID#1); 7423581#L283-33 assume !(2 == isFloorCalling_~floorID#1); 7423579#L287-33 assume !(3 == isFloorCalling_~floorID#1); 7423577#L291-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7423575#L302-33 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7423573#L2952-4 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7423571#L2220-2 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7423569#L1872-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7423567#L854-5 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7423565#L1876-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7423563#L2194-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7423561#L2233-2 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 7423559#L2588-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 7423557#L2363-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~23#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 7423555#L2368-2 timeShift_#t~ret74#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret74#1;havoc timeShift_#t~ret74#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7423553#L275-44 assume !(0 == isFloorCalling_~floorID#1); 7423551#L279-44 assume !(1 == isFloorCalling_~floorID#1); 7423549#L283-44 assume !(2 == isFloorCalling_~floorID#1); 7423547#L287-44 assume !(3 == isFloorCalling_~floorID#1); 7423545#L291-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7423543#L302-44 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7423541#L2952-5 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7423539#L2220-3 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7423537#L1872-3 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7423535#L854-7 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7423533#L1876-3 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7423531#L2194-3 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7423529#L2233-3 timeShift_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret75#1;havoc timeShift_#t~ret75#1; 7423527#L2597-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~23#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~23#1; 7423525#L2363-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~23#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~23#1; 7423523#L2368-3 timeShift_#t~ret76#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 7423521#L2277-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7423519#L854-8 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 7423516#L2281-12 assume !(0 != continueInDirection_~tmp~16#1); 7423514#L2287-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7423512#L2293-9 assume { :end_inline_continueInDirection } true; 7423510#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7423508#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 7423506#L1320-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7423504#L1334-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 7423502#L1336-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 7423500#L1677-6 __utac_acc__Specification1_spec__3_#t~ret21#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret21#1;havoc __utac_acc__Specification1_spec__3_#t~ret21#1; 7423497#L1340-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 7423498#L1349-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7423493#L1364-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7423494#L1379-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7423489#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7423490#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7423486#L1006-2 assume !false; 7371215#L1007 [2021-12-06 20:43:31,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:31,708 INFO L85 PathProgramCache]: Analyzing trace with hash -677919713, now seen corresponding path program 6 times [2021-12-06 20:43:31,708 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:31,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998119733] [2021-12-06 20:43:31,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:31,708 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:31,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:31,719 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:43:31,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:43:31,752 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:43:31,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:31,752 INFO L85 PathProgramCache]: Analyzing trace with hash -1486670501, now seen corresponding path program 1 times [2021-12-06 20:43:31,752 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:31,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [72513624] [2021-12-06 20:43:31,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:31,753 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:31,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:31,782 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2021-12-06 20:43:31,782 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:31,782 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [72513624] [2021-12-06 20:43:31,782 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [72513624] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:31,782 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:31,782 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:43:31,782 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [115692376] [2021-12-06 20:43:31,782 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:31,783 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:31,783 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:31,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 20:43:31,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:43:31,783 INFO L87 Difference]: Start difference. First operand 106097 states and 178211 transitions. cyclomatic complexity: 72136 Second operand has 7 states, 7 states have (on average 20.428571428571427) internal successors, (143), 7 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:33,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:33,105 INFO L93 Difference]: Finished difference Result 430910 states and 733611 transitions. [2021-12-06 20:43:33,106 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-06 20:43:33,106 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 430910 states and 733611 transitions. [2021-12-06 20:43:34,747 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 256497 [2021-12-06 20:43:35,855 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 430910 states to 425108 states and 724086 transitions. [2021-12-06 20:43:35,855 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 266638 [2021-12-06 20:43:35,987 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 266648 [2021-12-06 20:43:35,987 INFO L73 IsDeterministic]: Start isDeterministic. Operand 425108 states and 724086 transitions. [2021-12-06 20:43:35,988 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:35,988 INFO L681 BuchiCegarLoop]: Abstraction has 425108 states and 724086 transitions. [2021-12-06 20:43:36,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425108 states and 724086 transitions. [2021-12-06 20:43:37,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425108 to 82782. [2021-12-06 20:43:37,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82782 states, 82782 states have (on average 1.6794713826677297) internal successors, (139030), 82781 states have internal predecessors, (139030), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:37,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82782 states to 82782 states and 139030 transitions. [2021-12-06 20:43:37,832 INFO L704 BuchiCegarLoop]: Abstraction has 82782 states and 139030 transitions. [2021-12-06 20:43:37,832 INFO L587 BuchiCegarLoop]: Abstraction has 82782 states and 139030 transitions. [2021-12-06 20:43:37,832 INFO L425 BuchiCegarLoop]: ======== Iteration 51============ [2021-12-06 20:43:37,832 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 82782 states and 139030 transitions. [2021-12-06 20:43:38,009 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 47099 [2021-12-06 20:43:38,009 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:38,009 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:38,011 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:38,011 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:38,012 INFO L791 eck$LassoCheckResult]: Stem: 7905312#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 7905313#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 7905899#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7905900#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 7904673#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 7904674#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 7906221#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 7907387#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 7905682#L111 assume !(0 == getOrigin_~person#1); 7903953#L115 assume !(1 == getOrigin_~person#1); 7903954#L119 assume !(2 == getOrigin_~person#1); 7907331#L123 assume !(3 == getOrigin_~person#1); 7904596#L127 assume !(4 == getOrigin_~person#1); 7904597#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 7906479#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7905702#L551 assume !(0 == initPersonOnFloor_~floor#1); 7905703#L578 assume 1 == initPersonOnFloor_~floor#1; 7906241#L579 assume !(0 == initPersonOnFloor_~person#1); 7905326#L582 assume !(1 == initPersonOnFloor_~person#1); 7905327#L585 assume !(2 == initPersonOnFloor_~person#1); 7906285#L588 assume !(3 == initPersonOnFloor_~person#1); 7906952#L591 assume !(4 == initPersonOnFloor_~person#1); 7906345#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 7906346#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7905147#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7905148#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 7904340#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7904341#L343 assume !(0 == callOnFloor_~floorID#1); 7905438#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 7904850#L355-2 assume { :end_inline_callOnFloor } true; 7904851#L695 assume { :end_inline_initPersonOnFloor } true; 7906159#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 7907269#L111-1 assume !(0 == getOrigin_~person#1); 7904770#L115-1 assume !(1 == getOrigin_~person#1); 7904771#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 7904395#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7904396#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 7905955#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 7906242#L605-1 assume 2 == initPersonOnFloor_~floor#1; 7904503#L606-2 assume !(0 == initPersonOnFloor_~person#1); 7904504#L609-2 assume !(1 == initPersonOnFloor_~person#1); 7906393#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 7906480#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7904233#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7904234#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 7906823#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 7905224#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7907165#L343-2 assume !(0 == callOnFloor_~floorID#1); 7904251#L346-2 assume !(1 == callOnFloor_~floorID#1); 7904252#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 7906543#L355-5 assume { :end_inline_callOnFloor } true; 7906364#L695-1 assume { :end_inline_initPersonOnFloor } true; 7906365#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7907141#L275 assume !(0 == isFloorCalling_~floorID#1); 7906497#L279 assume !(1 == isFloorCalling_~floorID#1); 7906498#L283 assume !(2 == isFloorCalling_~floorID#1); 7906764#L287 assume !(3 == isFloorCalling_~floorID#1); 7905801#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7904490#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7904437#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7904438#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7906423#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7907272#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7905466#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 7905467#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7904543#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 7904544#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7905293#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 7905294#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7907573#L2489 assume !(0 != timeShift_~tmp___9~2#1); 7904638#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 7904639#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7904087#L275-3 assume !(0 == isFloorCalling_~floorID#1); 7904088#L279-3 assume !(1 == isFloorCalling_~floorID#1); 7906919#L283-3 assume !(2 == isFloorCalling_~floorID#1); 7906968#L287-3 assume !(3 == isFloorCalling_~floorID#1); 7905667#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7905668#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7905128#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 7905129#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7904026#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7904027#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 7907164#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 7907363#L1882 assume !(~currentFloorID~0 < 0); 7906920#L1897 assume !(~currentFloorID~0 < 0); 7906170#L1910 assume ~currentFloorID~0 < 1; 7906171#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7904385#L275-5 assume !(0 == isFloorCalling_~floorID#1); 7904386#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7906046#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 7906895#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 7905546#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 7907575#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 7907574#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 7906720#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 7904428#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 7904429#L2281 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 7905671#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7907577#L2293-1 assume { :end_inline_continueInDirection } true; 7907580#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7907579#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 7907578#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7906395#L1334 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 7907581#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7904303#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7904488#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7904141#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7906828#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 7906829#L1006-2 assume !false; 7923330#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7966332#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 7966329#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7966328#L1014 assume 1 != cleanup_~tmp___0~0#1; 7966327#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7966325#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7966320#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 7965699#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 7963221#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 7962464#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7962463#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7962462#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7962461#L275-30 assume !(0 == isFloorCalling_~floorID#1); 7962459#L279-30 assume !(1 == isFloorCalling_~floorID#1); 7962457#L283-30 assume !(2 == isFloorCalling_~floorID#1); 7962455#L287-30 assume !(3 == isFloorCalling_~floorID#1); 7962152#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7962151#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7962150#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7962149#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7962147#L275-32 assume !(0 == isFloorCalling_~floorID#1); 7962028#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7962025#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7970826#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7948342#L2322-3 [2021-12-06 20:43:38,012 INFO L793 eck$LassoCheckResult]: Loop: 7948342#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 7970825#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7970808#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 7945831#L2491-2 assume !(0 != ~persons_0~0); 7970786#L2491-3 assume !(0 != ~persons_1~0); 7970675#L2505-1 assume !(0 != ~persons_2~0); 7970665#L2519-1 assume !(0 != ~persons_3~0); 7970659#L2533-1 assume !(0 != ~persons_4~0); 7970654#L2547-1 assume !(0 != ~persons_5~0); 7970649#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 7970648#L371-12 assume !(0 == isPersonOnFloor_~floor#1); 7970646#L404-12 assume 1 == isPersonOnFloor_~floor#1; 7970567#L405-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 7970553#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 7970549#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 7970543#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 7970534#L371-14 assume 0 == isPersonOnFloor_~floor#1; 7970532#L372-7 assume !(0 == isPersonOnFloor_~person#1); 7970498#L376-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 7970480#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 7970476#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 7970475#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 7970442#L371-16 assume 0 == isPersonOnFloor_~floor#1; 7970443#L372-8 assume !(0 == isPersonOnFloor_~person#1); 7970913#L376-8 assume !(1 == isPersonOnFloor_~person#1); 7970377#L380-8 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 7970376#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 7970374#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 7970371#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 7970368#L371-18 assume 0 == isPersonOnFloor_~floor#1; 7970369#L372-9 assume !(0 == isPersonOnFloor_~person#1); 7970915#L376-9 assume !(1 == isPersonOnFloor_~person#1); 7970914#L380-9 assume !(2 == isPersonOnFloor_~person#1); 7970352#L384-9 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 7970348#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 7970345#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 7970343#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 7970341#L371-20 assume !(0 == isPersonOnFloor_~floor#1); 7970339#L404-20 assume !(1 == isPersonOnFloor_~floor#1); 7970336#L437-20 assume !(2 == isPersonOnFloor_~floor#1); 7970333#L470-20 assume !(3 == isPersonOnFloor_~floor#1); 7970330#L503-30 assume !(4 == isPersonOnFloor_~floor#1); 7970254#L503-32 isPersonOnFloor_~retValue_acc~4#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 7970249#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 7970247#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 7970234#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 7970231#L371-22 assume !(0 == isPersonOnFloor_~floor#1); 7970232#L404-22 assume !(1 == isPersonOnFloor_~floor#1); 7971001#L437-22 assume !(2 == isPersonOnFloor_~floor#1); 7970999#L470-22 assume !(3 == isPersonOnFloor_~floor#1); 7970998#L503-33 assume !(4 == isPersonOnFloor_~floor#1); 7968582#L503-35 isPersonOnFloor_~retValue_acc~4#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 7968577#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 7968575#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 7968573#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 7968570#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 7968565#L322-41 assume { :end_inline_resetCallOnFloor } true; 7968564#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 7968501#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 7968496#L1651-5 assume { :end_inline_resetFloorButton } true; 7968482#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7968478#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 7968460#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 7968459#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 7968458#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 7968461#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 7968462#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7970890#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7970888#L1006-2 assume !false; 7970886#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7970884#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 7970882#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7970881#L1014 assume 1 != cleanup_~tmp___0~0#1; 7970880#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7970878#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7970874#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 7970872#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 7970869#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 7970857#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7970856#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7970855#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7970853#L275-30 assume !(0 == isFloorCalling_~floorID#1); 7970852#L279-30 assume !(1 == isFloorCalling_~floorID#1); 7970851#L283-30 assume !(2 == isFloorCalling_~floorID#1); 7970850#L287-30 assume !(3 == isFloorCalling_~floorID#1); 7970849#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7970848#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 7970847#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7970846#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 7970833#L275-32 assume !(0 == isFloorCalling_~floorID#1); 7970832#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 7970828#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 7970827#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 7948342#L2322-3 [2021-12-06 20:43:38,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:38,012 INFO L85 PathProgramCache]: Analyzing trace with hash -895552799, now seen corresponding path program 1 times [2021-12-06 20:43:38,012 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:38,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [879080962] [2021-12-06 20:43:38,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:38,013 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:38,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:38,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:38,042 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:38,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [879080962] [2021-12-06 20:43:38,042 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [879080962] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:38,042 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:38,042 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 20:43:38,042 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [516781577] [2021-12-06 20:43:38,042 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:38,043 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:43:38,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:38,043 INFO L85 PathProgramCache]: Analyzing trace with hash 1362794719, now seen corresponding path program 1 times [2021-12-06 20:43:38,043 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:38,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [901833629] [2021-12-06 20:43:38,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:38,043 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:38,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:38,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:38,058 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:38,058 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [901833629] [2021-12-06 20:43:38,058 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [901833629] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:38,058 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:38,058 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:43:38,058 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [6728997] [2021-12-06 20:43:38,058 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:38,058 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:38,059 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:38,059 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:43:38,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:43:38,059 INFO L87 Difference]: Start difference. First operand 82782 states and 139030 transitions. cyclomatic complexity: 56266 Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:38,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:38,572 INFO L93 Difference]: Finished difference Result 117787 states and 195026 transitions. [2021-12-06 20:43:38,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 20:43:38,573 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117787 states and 195026 transitions. [2021-12-06 20:43:38,957 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 58908 [2021-12-06 20:43:39,245 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117787 states to 117787 states and 195026 transitions. [2021-12-06 20:43:39,245 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 72808 [2021-12-06 20:43:39,289 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 72808 [2021-12-06 20:43:39,289 INFO L73 IsDeterministic]: Start isDeterministic. Operand 117787 states and 195026 transitions. [2021-12-06 20:43:39,290 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:39,290 INFO L681 BuchiCegarLoop]: Abstraction has 117787 states and 195026 transitions. [2021-12-06 20:43:39,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117787 states and 195026 transitions. [2021-12-06 20:43:40,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117787 to 81466. [2021-12-06 20:43:40,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81466 states, 81466 states have (on average 1.6817936316991138) internal successors, (137009), 81465 states have internal predecessors, (137009), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:40,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81466 states to 81466 states and 137009 transitions. [2021-12-06 20:43:40,332 INFO L704 BuchiCegarLoop]: Abstraction has 81466 states and 137009 transitions. [2021-12-06 20:43:40,332 INFO L587 BuchiCegarLoop]: Abstraction has 81466 states and 137009 transitions. [2021-12-06 20:43:40,332 INFO L425 BuchiCegarLoop]: ======== Iteration 52============ [2021-12-06 20:43:40,332 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81466 states and 137009 transitions. [2021-12-06 20:43:40,506 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 46287 [2021-12-06 20:43:40,506 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 20:43:40,506 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 20:43:40,508 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:40,508 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:43:40,508 INFO L791 eck$LassoCheckResult]: Stem: 8105905#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 8105906#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~7#1, main_~tmp~8#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 8106483#L1242 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 8106484#L1235 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 8105253#L1250 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 8105254#L1206 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 8106795#L1176 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 8107921#L1275 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 8106281#L111 assume !(0 == getOrigin_~person#1); 8104534#L115 assume !(1 == getOrigin_~person#1); 8104535#L119 assume !(2 == getOrigin_~person#1); 8107853#L123 assume !(3 == getOrigin_~person#1); 8105176#L127 assume !(4 == getOrigin_~person#1); 8105177#L131 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 8107043#L136 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8106299#L551 assume !(0 == initPersonOnFloor_~floor#1); 8106300#L578 assume 1 == initPersonOnFloor_~floor#1; 8106816#L579 assume !(0 == initPersonOnFloor_~person#1); 8105919#L582 assume !(1 == initPersonOnFloor_~person#1); 8105920#L585 assume !(2 == initPersonOnFloor_~person#1); 8106858#L588 assume !(3 == initPersonOnFloor_~person#1); 8107488#L591 assume !(4 == initPersonOnFloor_~person#1); 8106914#L594 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 8106915#L659-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8105737#L1282 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 8105738#L1285 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 8104919#L1294-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8104920#L343 assume !(0 == callOnFloor_~floorID#1); 8106033#L346 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 8105432#L355-2 assume { :end_inline_callOnFloor } true; 8105433#L695 assume { :end_inline_initPersonOnFloor } true; 8106737#L976 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 8107787#L111-1 assume !(0 == getOrigin_~person#1); 8105352#L115-1 assume !(1 == getOrigin_~person#1); 8105353#L119-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 8104973#L136-1 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8104974#L551-1 assume !(0 == initPersonOnFloor_~floor#1); 8106542#L578-1 assume !(1 == initPersonOnFloor_~floor#1); 8106817#L605-1 assume 2 == initPersonOnFloor_~floor#1; 8105082#L606-2 assume !(0 == initPersonOnFloor_~person#1); 8105083#L609-2 assume !(1 == initPersonOnFloor_~person#1); 8106960#L612-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 8107044#L659-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8104813#L1282-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 8104814#L1285-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 8107370#L1288-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 8105817#L1294-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8107689#L343-2 assume !(0 == callOnFloor_~floorID#1); 8104831#L346-2 assume !(1 == callOnFloor_~floorID#1); 8104832#L349-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 8107094#L355-5 assume { :end_inline_callOnFloor } true; 8106932#L695-1 assume { :end_inline_initPersonOnFloor } true; 8106933#L943 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8107669#L275 assume !(0 == isFloorCalling_~floorID#1); 8107054#L279 assume !(1 == isFloorCalling_~floorID#1); 8107055#L283 assume !(2 == isFloorCalling_~floorID#1); 8107314#L287 assume !(3 == isFloorCalling_~floorID#1); 8106398#L291 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8105069#L302 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 8105016#L2952 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 8105017#L2337 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8106990#L275-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8107790#L302-2 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 8106062#L2310-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 8106063#L1685-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 8105122#L1706-1 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1; 8105123#L2317-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 8105884#L2322-1 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 8105885#L2354 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 8108102#L2489 assume !(0 != timeShift_~tmp___9~2#1); 8105218#L2580 assume 1 == ~doorState~0;~doorState~0 := 0; 8105219#L2580-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8104669#L275-3 assume !(0 == isFloorCalling_~floorID#1); 8104670#L279-3 assume !(1 == isFloorCalling_~floorID#1); 8107457#L283-3 assume !(2 == isFloorCalling_~floorID#1); 8107499#L287-3 assume !(3 == isFloorCalling_~floorID#1); 8106266#L291-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8106267#L302-3 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 8105718#L2952-1 stopRequestedInDirection_#t~ret44#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret44#1;havoc stopRequestedInDirection_#t~ret44#1; 8105719#L2220 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1, stopRequestedInDirection__wrappee__weight_~tmp~14#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~3#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~14#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 8104606#L1872 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 8104607#L854 stopRequestedInDirection__wrappee__weight_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~14#1 := stopRequestedInDirection__wrappee__weight_#t~ret33#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret33#1; 8107688#L1876 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~14#1); 8107892#L1882 assume !(~currentFloorID~0 < 0); 8107458#L1897 assume !(~currentFloorID~0 < 0); 8106746#L1910 assume ~currentFloorID~0 < 1; 8106747#L1912 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8104963#L275-5 assume !(0 == isFloorCalling_~floorID#1); 8104964#L279-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8106632#L302-5 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 8107436#L1916 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~18#1; 8106143#L2194 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 8108104#L2233 timeShift_#t~ret73#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 8108103#L2588 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 8107269#L2277 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 8105008#L854-1 continueInDirection_#t~ret47#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret47#1;havoc continueInDirection_#t~ret47#1; 8105009#L2281 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 8106270#L2287-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8108112#L2293-1 assume { :end_inline_continueInDirection } true; 8108113#L2597-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 8108108#L1668-3 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 8108109#L1320 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 8106962#L1334 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 8108115#L1349 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 8104882#L1364 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 8108092#L1379 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 8104724#L1380 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8107372#L2612 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 8107373#L1006-2 assume !false; 8133170#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 8149483#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 8149482#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 8149480#L1014 assume 1 != cleanup_~tmp___0~0#1; 8149477#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8149473#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8149466#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 8149458#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 8149451#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 8149439#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 8149438#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 8149436#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8149434#L275-30 assume !(0 == isFloorCalling_~floorID#1); 8149432#L279-30 assume !(1 == isFloorCalling_~floorID#1); 8149430#L283-30 assume !(2 == isFloorCalling_~floorID#1); 8149428#L287-30 assume !(3 == isFloorCalling_~floorID#1); 8149426#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8149424#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 8149422#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 8149420#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8149417#L275-32 assume !(0 == isFloorCalling_~floorID#1); 8149415#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8149409#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 8149406#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 8149255#L2322-3 [2021-12-06 20:43:40,508 INFO L793 eck$LassoCheckResult]: Loop: 8149255#L2322-3 stopRequestedAtCurrentFloor_#t~ret53#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 8149398#L2354-1 timeShift_#t~ret66#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 8147954#L2489-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 8147952#L2491-2 assume !(0 != ~persons_0~0); 8147942#L2491-3 assume !(0 != ~persons_1~0); 8147936#L2505-1 assume !(0 != ~persons_2~0); 8147931#L2519-1 assume !(0 != ~persons_3~0); 8147926#L2533-1 assume !(0 != ~persons_4~0); 8147920#L2547-1 assume !(0 != ~persons_5~0); 8147358#L2561-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_#t~ret62#1, processWaitingOnFloor_#t~ret63#1, processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~19#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~19#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 8147357#L371-12 assume !(0 == isPersonOnFloor_~floor#1); 8147356#L404-12 assume 1 == isPersonOnFloor_~floor#1; 8147331#L405-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 8147291#L543-6 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 8147285#L2391-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 8147278#L2391-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 8147275#L371-14 assume !(0 == isPersonOnFloor_~floor#1); 8147265#L404-14 assume 1 == isPersonOnFloor_~floor#1; 8147260#L405-7 assume !(0 == isPersonOnFloor_~person#1); 8147232#L409-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 8147216#L543-7 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 8147212#L2404-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 8146938#L2404-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 8146937#L371-16 assume !(0 == isPersonOnFloor_~floor#1); 8146935#L404-16 assume 1 == isPersonOnFloor_~floor#1; 8146936#L405-8 assume !(0 == isPersonOnFloor_~person#1); 8146939#L409-8 assume !(1 == isPersonOnFloor_~person#1); 8146545#L413-8 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_2_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 8146542#L543-8 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 8146540#L2417-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 8146538#L2417-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 8146536#L371-18 assume !(0 == isPersonOnFloor_~floor#1); 8146533#L404-18 assume !(1 == isPersonOnFloor_~floor#1); 8146532#L437-18 assume !(2 == isPersonOnFloor_~floor#1); 8146529#L470-18 assume !(3 == isPersonOnFloor_~floor#1); 8146530#L503-27 assume !(4 == isPersonOnFloor_~floor#1); 8146519#L503-29 isPersonOnFloor_~retValue_acc~4#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 8146517#L543-9 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 8146514#L2430-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 8146511#L2430-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 8146510#L371-20 assume !(0 == isPersonOnFloor_~floor#1); 8146508#L404-20 assume !(1 == isPersonOnFloor_~floor#1); 8146505#L437-20 assume !(2 == isPersonOnFloor_~floor#1); 8146502#L470-20 assume !(3 == isPersonOnFloor_~floor#1); 8146499#L503-30 assume !(4 == isPersonOnFloor_~floor#1); 8146481#L503-32 isPersonOnFloor_~retValue_acc~4#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 8146476#L543-10 processWaitingOnFloor_#t~ret62#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret62#1;havoc processWaitingOnFloor_#t~ret62#1; 8146474#L2443-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 8146472#L2443-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 8146471#L371-22 assume !(0 == isPersonOnFloor_~floor#1); 8146469#L404-22 assume !(1 == isPersonOnFloor_~floor#1); 8146461#L437-22 assume !(2 == isPersonOnFloor_~floor#1); 8146458#L470-22 assume !(3 == isPersonOnFloor_~floor#1); 8146457#L503-33 assume !(4 == isPersonOnFloor_~floor#1); 8146361#L503-35 isPersonOnFloor_~retValue_acc~4#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 8146356#L543-11 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 8146353#L2456-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 8146349#L2456-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 8146343#L310-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 8146337#L322-41 assume { :end_inline_resetCallOnFloor } true; 8146336#L2469-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 8146319#L1639-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 8146313#L1651-5 assume { :end_inline_resetFloorButton } true; 8146309#L2597-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret19#1, __utac_acc__Specification1_spec__3_#t~ret20#1, __utac_acc__Specification1_spec__3_#t~ret21#1, __utac_acc__Specification1_spec__3_#t~ret22#1, __utac_acc__Specification1_spec__3_#t~ret23#1, __utac_acc__Specification1_spec__3_#t~ret24#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~9#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~9#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 8146307#L1668-7 __utac_acc__Specification1_spec__3_#t~ret19#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~9#1 := __utac_acc__Specification1_spec__3_#t~ret19#1;havoc __utac_acc__Specification1_spec__3_#t~ret19#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~9#1; 8146299#L1320-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 8146297#L1321-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 8146298#L1677-5 __utac_acc__Specification1_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret20#1;havoc __utac_acc__Specification1_spec__3_#t~ret20#1; 8146300#L1325-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 8146301#L1380-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8149322#L2612-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 8149321#L1006-2 assume !false; 8149320#L1007 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 8149319#L1010 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 8149318#L1515 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 8149317#L1014 assume 1 != cleanup_~tmp___0~0#1; 8149315#L1014-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~13#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~13#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~12#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~12#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8149312#L275-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8149306#L302-25 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 8149298#L1776 assume !(0 != anyStopRequested_~tmp___3~1#1); 8149292#L1780 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 8149281#L1840 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~13#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~13#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 8149280#L1853 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 8149279#L1026 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_~tmp~20#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~20#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~18#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~18#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret103#1, isExecutiveFloorCalling_~retValue_acc~25#1;havoc isExecutiveFloorCalling_~retValue_acc~25#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8149278#L275-30 assume !(0 == isFloorCalling_~floorID#1); 8149277#L279-30 assume !(1 == isFloorCalling_~floorID#1); 8149276#L283-30 assume !(2 == isFloorCalling_~floorID#1); 8149275#L287-30 assume !(3 == isFloorCalling_~floorID#1); 8149274#L291-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8149273#L302-30 isExecutiveFloorCalling_#t~ret103#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25#1 := isExecutiveFloorCalling_#t~ret103#1;havoc isExecutiveFloorCalling_#t~ret103#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~25#1; 8149272#L2952-3 stopRequestedAtCurrentFloor_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 8149271#L2337-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~18#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~17#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 8149270#L275-32 assume !(0 == isFloorCalling_~floorID#1); 8149269#L279-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 8149263#L302-32 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 8149264#L2310-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~21#1; 8149255#L2322-3 [2021-12-06 20:43:40,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:40,509 INFO L85 PathProgramCache]: Analyzing trace with hash -895552799, now seen corresponding path program 2 times [2021-12-06 20:43:40,509 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:40,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1012936175] [2021-12-06 20:43:40,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:40,509 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:40,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:40,539 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:40,539 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:40,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1012936175] [2021-12-06 20:43:40,539 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1012936175] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:40,539 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:40,539 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 20:43:40,539 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568187503] [2021-12-06 20:43:40,539 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:40,539 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 20:43:40,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:43:40,540 INFO L85 PathProgramCache]: Analyzing trace with hash -494091054, now seen corresponding path program 1 times [2021-12-06 20:43:40,540 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:43:40,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1002414719] [2021-12-06 20:43:40,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:43:40,540 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:43:40,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:43:40,555 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:43:40,555 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:43:40,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1002414719] [2021-12-06 20:43:40,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1002414719] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:43:40,555 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:43:40,555 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:43:40,556 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403286332] [2021-12-06 20:43:40,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:43:40,556 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-06 20:43:40,556 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:43:40,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:43:40,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:43:40,556 INFO L87 Difference]: Start difference. First operand 81466 states and 137009 transitions. cyclomatic complexity: 55561 Second operand has 5 states, 5 states have (on average 19.2) internal successors, (96), 5 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:43:41,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:43:41,145 INFO L93 Difference]: Finished difference Result 146535 states and 245209 transitions. [2021-12-06 20:43:41,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 20:43:41,146 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 146535 states and 245209 transitions. [2021-12-06 20:43:41,613 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 76838 [2021-12-06 20:43:41,968 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 146535 states to 146535 states and 245209 transitions. [2021-12-06 20:43:41,968 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 90092 [2021-12-06 20:43:42,023 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 90092 [2021-12-06 20:43:42,023 INFO L73 IsDeterministic]: Start isDeterministic. Operand 146535 states and 245209 transitions. [2021-12-06 20:43:42,024 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 20:43:42,024 INFO L681 BuchiCegarLoop]: Abstraction has 146535 states and 245209 transitions. [2021-12-06 20:43:42,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146535 states and 245209 transitions.