./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c7caf1796ba4b07248be26f00733894517b89591cbeb4bf07d682989c7001a35 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:13:30,340 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:13:30,342 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:13:30,380 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:13:30,380 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:13:30,382 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:13:30,384 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:13:30,387 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:13:30,389 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:13:30,391 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:13:30,392 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:13:30,394 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:13:30,395 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:13:30,396 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:13:30,398 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:13:30,400 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:13:30,401 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:13:30,403 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:13:30,406 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:13:30,409 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:13:30,411 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:13:30,420 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:13:30,422 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:13:30,423 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:13:30,430 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:13:30,430 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:13:30,431 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:13:30,432 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:13:30,442 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:13:30,444 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:13:30,445 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:13:30,447 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:13:30,449 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:13:30,451 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:13:30,452 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:13:30,453 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:13:30,454 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:13:30,454 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:13:30,454 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:13:30,456 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:13:30,456 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:13:30,457 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-10-17 10:13:30,518 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:13:30,518 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:13:30,519 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:13:30,519 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:13:30,520 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:13:30,521 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:13:30,521 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:13:30,525 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-10-17 10:13:30,526 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-10-17 10:13:30,526 INFO L138 SettingsManager]: * Use old map elimination=false [2022-10-17 10:13:30,527 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-10-17 10:13:30,527 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-10-17 10:13:30,528 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-10-17 10:13:30,528 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:13:30,528 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:13:30,529 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-17 10:13:30,529 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:13:30,529 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:13:30,529 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:13:30,530 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-10-17 10:13:30,530 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-10-17 10:13:30,530 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-10-17 10:13:30,530 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:13:30,531 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:13:30,531 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-10-17 10:13:30,532 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:13:30,532 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-10-17 10:13:30,532 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:13:30,533 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:13:30,533 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:13:30,533 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:13:30,535 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-10-17 10:13:30,535 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c7caf1796ba4b07248be26f00733894517b89591cbeb4bf07d682989c7001a35 [2022-10-17 10:13:30,874 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:13:30,907 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:13:30,910 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:13:30,911 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:13:30,912 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:13:30,914 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c [2022-10-17 10:13:30,991 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/data/6db7d9342/642b4cd0679743359c5a4326f45bc735/FLAGa419c3404 [2022-10-17 10:13:31,785 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:13:31,789 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c [2022-10-17 10:13:31,828 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/data/6db7d9342/642b4cd0679743359c5a4326f45bc735/FLAGa419c3404 [2022-10-17 10:13:31,855 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/data/6db7d9342/642b4cd0679743359c5a4326f45bc735 [2022-10-17 10:13:31,860 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:13:31,863 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:13:31,865 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:13:31,866 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:13:31,870 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:13:31,871 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:13:31" (1/1) ... [2022-10-17 10:13:31,873 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1df4c74a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:31, skipping insertion in model container [2022-10-17 10:13:31,873 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:13:31" (1/1) ... [2022-10-17 10:13:31,882 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:13:31,961 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:13:32,214 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c[4117,4130] [2022-10-17 10:13:32,777 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:13:32,794 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:13:32,824 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/sv-benchmarks/c/product-lines/elevator_spec1_product29.cil.c[4117,4130] [2022-10-17 10:13:32,952 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:13:32,994 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:13:32,994 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32 WrapperNode [2022-10-17 10:13:32,994 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:13:32,996 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:13:32,996 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:13:32,996 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:13:33,005 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,049 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,374 INFO L138 Inliner]: procedures = 93, calls = 342, calls flagged for inlining = 195, calls inlined = 404, statements flattened = 13564 [2022-10-17 10:13:33,375 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:13:33,376 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:13:33,376 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:13:33,376 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:13:33,387 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,388 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,435 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,435 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,571 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,753 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,781 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,807 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,848 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:13:33,850 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:13:33,850 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:13:33,851 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:13:33,852 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (1/1) ... [2022-10-17 10:13:33,862 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-10-17 10:13:33,877 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:13:33,903 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-10-17 10:13:33,984 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9adaecb6-0c73-48cd-a0eb-d285aebe67ee/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-10-17 10:13:34,035 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:13:34,035 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:13:34,035 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:13:34,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:13:34,288 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:13:34,290 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:13:40,815 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:13:40,849 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:13:40,849 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-10-17 10:13:40,856 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:13:40 BoogieIcfgContainer [2022-10-17 10:13:40,856 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:13:40,857 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-10-17 10:13:40,858 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-10-17 10:13:40,862 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-10-17 10:13:40,863 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-10-17 10:13:40,863 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.10 10:13:31" (1/3) ... [2022-10-17 10:13:40,864 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@32d68831 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.10 10:13:40, skipping insertion in model container [2022-10-17 10:13:40,864 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-10-17 10:13:40,864 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:13:32" (2/3) ... [2022-10-17 10:13:40,865 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@32d68831 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.10 10:13:40, skipping insertion in model container [2022-10-17 10:13:40,865 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-10-17 10:13:40,865 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:13:40" (3/3) ... [2022-10-17 10:13:40,867 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product29.cil.c [2022-10-17 10:13:40,976 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-10-17 10:13:40,976 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-10-17 10:13:40,976 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-10-17 10:13:40,976 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-10-17 10:13:40,976 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-10-17 10:13:40,977 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-10-17 10:13:40,977 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-10-17 10:13:40,977 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-10-17 10:13:40,994 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3624 states, 3623 states have (on average 1.8738614407949212) internal successors, (6789), 3623 states have internal predecessors, (6789), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:41,110 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1764 [2022-10-17 10:13:41,110 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:41,110 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:41,131 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:41,131 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:41,131 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-10-17 10:13:41,142 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3624 states, 3623 states have (on average 1.8738614407949212) internal successors, (6789), 3623 states have internal predecessors, (6789), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:41,258 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1764 [2022-10-17 10:13:41,258 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:41,259 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:41,266 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:41,266 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:41,275 INFO L748 eck$LassoCheckResult]: Stem: 2272#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3545#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 1838#L1418true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 648#L1411true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 185#L1426true main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 2296#L1382true assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 345#L1353true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1416#L197true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2021#L95true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1766#L120true bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3220#L728true assume 0 == initPersonOnFloor_~floor#1; 155#L729true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1162#L836-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1015#L204true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 3186#L216-2true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2866#L520true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2187#L532-2true assume { :end_inline_callOnFloor } true; 2237#L872true assume { :end_inline_initPersonOnFloor } true; 1891#L1153true assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 85#L95-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 729#L120-1true angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1773#L728-1true assume 0 == initPersonOnFloor_~floor#1; 3477#L729-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3445#L836-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2371#L204-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1195#L216-5true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 3114#L520-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 780#L532-5true assume { :end_inline_callOnFloor } true; 2108#L872-1true assume { :end_inline_initPersonOnFloor } true; 1078#L1120true assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 445#L2447true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1198#L1766true stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1993#L1783true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 283#L1804true stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 1409#L2458true timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 1252#L2594true assume !(0 != timeShift_~tmp___9~2#1); 1533#L2685true assume !(1 == ~doorState~0); 13#L2685-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 2536#L2350true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 1688#L2371true stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 2012#L2323true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 676#L1970-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1174#L2139-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 322#L2292-2true stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 1725#L2341true timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 1464#L2693true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1433#L2385true assume !(1 == ~currentHeading~0); 2310#L2395true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3093#L2395-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3163#L2401-1true assume { :end_inline_continueInDirection } true; 344#L2702-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 3345#L1766-1true __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 3392#L242true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2671#L243true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 907#L1775true __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 1012#L247true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2017#L302true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 678#L2717true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 3181#L1183-2true [2022-10-17 10:13:41,277 INFO L750 eck$LassoCheckResult]: Loop: 3181#L1183-2true assume !false; 633#L1184true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 944#L1187true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1384#L1593true cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 171#L1191true assume 1 != cleanup_~tmp___0~1#1; 2922#L1191-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2182#L453-61true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2100#L480-61true anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 220#L1874true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2015#L1938true isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 3463#L1951true cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 2621#L1203true assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 1752#L2447-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1771#L1766-2true stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1965#L1783-2true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 2699#L1804-2true stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 3363#L2458-1true timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 320#L2594-2true assume !(0 != timeShift_~tmp___9~2#1); 121#L2685-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1463#L2685-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 2529#L2350-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 2779#L2371-2true stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 935#L2323-2true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1369#L1970-8true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1070#L2139-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 1957#L2292-8true stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 133#L2341-2true timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 21#L2693-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1270#L2385-3true assume !(1 == ~currentHeading~0); 3573#L2395-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 143#L2395-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2540#L2401-7true assume { :end_inline_continueInDirection } true; 2497#L2702-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1152#L1766-3true __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 850#L242-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2812#L243-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 3512#L1775-5true __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 2898#L247-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1490#L302-1true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2234#L2717-1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3181#L1183-2true [2022-10-17 10:13:41,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:41,285 INFO L85 PathProgramCache]: Analyzing trace with hash -287225513, now seen corresponding path program 1 times [2022-10-17 10:13:41,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:41,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [953781082] [2022-10-17 10:13:41,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:41,297 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:41,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:41,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:41,793 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:41,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [953781082] [2022-10-17 10:13:41,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [953781082] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:41,797 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:41,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:41,799 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577828100] [2022-10-17 10:13:41,800 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:41,806 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:41,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:41,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1917979781, now seen corresponding path program 1 times [2022-10-17 10:13:41,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:41,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [88899834] [2022-10-17 10:13:41,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:41,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:41,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:42,009 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:42,010 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:42,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [88899834] [2022-10-17 10:13:42,010 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [88899834] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:42,011 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:42,011 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:13:42,011 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1027977674] [2022-10-17 10:13:42,012 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:42,014 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-10-17 10:13:42,015 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:13:42,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:13:42,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:13:42,065 INFO L87 Difference]: Start difference. First operand has 3624 states, 3623 states have (on average 1.8738614407949212) internal successors, (6789), 3623 states have internal predecessors, (6789), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:43,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:13:43,094 INFO L93 Difference]: Finished difference Result 4915 states and 9088 transitions. [2022-10-17 10:13:43,096 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4915 states and 9088 transitions. [2022-10-17 10:13:43,156 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2924 [2022-10-17 10:13:43,219 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4915 states to 4843 states and 9007 transitions. [2022-10-17 10:13:43,220 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4843 [2022-10-17 10:13:43,229 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4843 [2022-10-17 10:13:43,229 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4843 states and 9007 transitions. [2022-10-17 10:13:43,249 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-10-17 10:13:43,249 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4843 states and 9007 transitions. [2022-10-17 10:13:43,279 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4843 states and 9007 transitions. [2022-10-17 10:13:43,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4843 to 3611. [2022-10-17 10:13:43,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3611 states, 3611 states have (on average 1.8737191913597342) internal successors, (6766), 3610 states have internal predecessors, (6766), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:43,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3611 states to 3611 states and 6766 transitions. [2022-10-17 10:13:43,436 INFO L240 hiAutomatonCegarLoop]: Abstraction has 3611 states and 6766 transitions. [2022-10-17 10:13:43,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:13:43,444 INFO L428 stractBuchiCegarLoop]: Abstraction has 3611 states and 6766 transitions. [2022-10-17 10:13:43,444 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-10-17 10:13:43,445 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3611 states and 6766 transitions. [2022-10-17 10:13:43,489 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1769 [2022-10-17 10:13:43,489 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:43,490 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:43,496 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:43,496 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:43,497 INFO L748 eck$LassoCheckResult]: Stem: 11727#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 11728#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 11419#L1418 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 9913#L1411 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 9017#L1426 main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 9018#L1382 assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 9362#L1353 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 9363#L197 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 11007#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 9753#L120 bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11355#L728 assume 0 == initPersonOnFloor_~floor#1; 8948#L729 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 8881#L836-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 10479#L204 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 10102#L216-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 12020#L520 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 8694#L532-2 assume { :end_inline_callOnFloor } true; 11673#L872 assume { :end_inline_initPersonOnFloor } true; 11466#L1153 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 8774#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 8775#L120-1 angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10052#L728-1 assume 0 == initPersonOnFloor_~floor#1; 11362#L729-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 8608#L836-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 11783#L204-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 10716#L216-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 10717#L520-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 9010#L532-5 assume { :end_inline_callOnFloor } true; 10139#L872-1 assume { :end_inline_initPersonOnFloor } true; 10566#L1120 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 9545#L2447 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 9547#L1766 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 10721#L1783 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 9233#L1804 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 9234#L2458 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 10803#L2594 assume !(0 != timeShift_~tmp___9~2#1); 10804#L2685 assume !(1 == ~doorState~0); 8589#L2685-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 8590#L2350 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 8603#L2371 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 11289#L2323 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 9960#L1970-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 9961#L2139-2 assume !(0 == ~currentFloorID~0); 10605#L2145-2 assume !(~currentFloorID~0 > 0); 10607#L2160-2 assume ~currentFloorID~0 > 0; 9454#L2162-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 9455#L2163-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 10540#L2292-2 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 12169#L2341 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 12168#L2693 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 11030#L2385 assume !(1 == ~currentHeading~0); 11032#L2395 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10860#L2395-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12099#L2401-1 assume { :end_inline_continueInDirection } true; 9360#L2702-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 9361#L1766-1 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 12148#L242 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 11941#L243 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 10323#L1775 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 10324#L247 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 8748#L302 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9964#L2717 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 9965#L1183-2 [2022-10-17 10:13:43,498 INFO L750 eck$LassoCheckResult]: Loop: 9965#L1183-2 assume !false; 9886#L1184 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 9887#L1187 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 10373#L1593 cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 8987#L1191 assume 1 != cleanup_~tmp___0~1#1; 8988#L1191-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 11667#L453-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 9304#L480-61 anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 9088#L1874 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 9089#L1938 isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 11548#L1951 cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 11918#L1203 assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 11346#L2447-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 11347#L1766-2 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 11359#L1783-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 11165#L1804-2 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 10737#L2458-1 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 9316#L2594-2 assume !(0 != timeShift_~tmp___9~2#1); 8866#L2685-3 assume 1 == ~doorState~0;~doorState~0 := 0; 8867#L2685-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 11062#L2350-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 9557#L2371-2 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 10360#L2323-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10362#L1970-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 10556#L2139-8 assume !(0 == ~currentFloorID~0); 10557#L2145-8 assume !(~currentFloorID~0 > 0); 11155#L2160-8 assume ~currentFloorID~0 > 0; 11705#L2162-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 10726#L2163-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 8600#L2292-8 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 12167#L2341-2 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 12166#L2693-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 10827#L2385-3 assume !(1 == ~currentHeading~0); 10829#L2395-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8919#L2395-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8920#L2401-7 assume { :end_inline_continueInDirection } true; 10811#L2702-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 10671#L1766-3 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 10237#L242-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 10238#L243-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 11997#L1775-5 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 12036#L247-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 9535#L302-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 11091#L2717-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 9965#L1183-2 [2022-10-17 10:13:43,498 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:43,499 INFO L85 PathProgramCache]: Analyzing trace with hash 180692814, now seen corresponding path program 1 times [2022-10-17 10:13:43,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:43,499 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1011942329] [2022-10-17 10:13:43,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:43,500 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:43,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:43,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:43,753 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:43,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1011942329] [2022-10-17 10:13:43,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1011942329] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:43,757 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:43,757 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:43,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [741136654] [2022-10-17 10:13:43,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:43,760 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:43,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:43,762 INFO L85 PathProgramCache]: Analyzing trace with hash -13724676, now seen corresponding path program 1 times [2022-10-17 10:13:43,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:43,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [110188517] [2022-10-17 10:13:43,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:43,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:43,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:43,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:43,896 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:43,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [110188517] [2022-10-17 10:13:43,896 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [110188517] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:43,897 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:43,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:13:43,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [57336145] [2022-10-17 10:13:43,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:43,898 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-10-17 10:13:43,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:13:43,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:13:43,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:13:43,899 INFO L87 Difference]: Start difference. First operand 3611 states and 6766 transitions. cyclomatic complexity: 3156 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:46,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:13:46,719 INFO L93 Difference]: Finished difference Result 10158 states and 18620 transitions. [2022-10-17 10:13:46,719 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10158 states and 18620 transitions. [2022-10-17 10:13:46,832 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6012 [2022-10-17 10:13:46,951 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10158 states to 10158 states and 18620 transitions. [2022-10-17 10:13:46,952 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10158 [2022-10-17 10:13:46,971 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10158 [2022-10-17 10:13:46,971 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10158 states and 18620 transitions. [2022-10-17 10:13:46,989 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-10-17 10:13:46,989 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10158 states and 18620 transitions. [2022-10-17 10:13:47,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10158 states and 18620 transitions. [2022-10-17 10:13:47,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10158 to 4536. [2022-10-17 10:13:47,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4536 states, 4536 states have (on average 1.8337742504409171) internal successors, (8318), 4535 states have internal predecessors, (8318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:47,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4536 states to 4536 states and 8318 transitions. [2022-10-17 10:13:47,175 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4536 states and 8318 transitions. [2022-10-17 10:13:47,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-17 10:13:47,183 INFO L428 stractBuchiCegarLoop]: Abstraction has 4536 states and 8318 transitions. [2022-10-17 10:13:47,183 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-10-17 10:13:47,183 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4536 states and 8318 transitions. [2022-10-17 10:13:47,214 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3098 [2022-10-17 10:13:47,215 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:47,215 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:47,221 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:47,221 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:47,223 INFO L748 eck$LassoCheckResult]: Stem: 25156#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 25157#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 24884#L1418 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 23533#L1411 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 22744#L1426 main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 22745#L1382 assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 23052#L1353 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 23053#L197 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 24528#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 23386#L120 bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24818#L728 assume 0 == initPersonOnFloor_~floor#1; 22682#L729 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22620#L836-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 24045#L204 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 23701#L216-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 25432#L520 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22468#L532-2 assume { :end_inline_callOnFloor } true; 25112#L872 assume { :end_inline_initPersonOnFloor } true; 24920#L1153 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 22530#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 22531#L120-1 angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23654#L728-1 assume 0 == initPersonOnFloor_~floor#1; 24826#L729-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22398#L836-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 25207#L204-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 24260#L216-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 24261#L520-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22743#L532-5 assume { :end_inline_callOnFloor } true; 23734#L872-1 assume { :end_inline_initPersonOnFloor } true; 24119#L1120 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 23201#L2447 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 23203#L1766 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 24266#L1783 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 22934#L1804 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 22935#L2458 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 24330#L2594 assume !(0 != timeShift_~tmp___9~2#1); 24331#L2685 assume !(1 == ~doorState~0); 22377#L2685-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 22378#L2350 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 22391#L2371 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 24762#L2323 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 23571#L1970-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 23573#L1031-2 stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1; 25399#L1974-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1); 25277#L1980-2 assume !(~currentFloorID~0 < 0); 24798#L1995-2 assume !(~currentFloorID~0 < 0); 24799#L2008-2 assume ~currentFloorID~0 < 1; 23961#L2010-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 23352#L453-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 22650#L480-22 stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1; 23682#L2014-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 24100#L2292-2 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 26610#L2341 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 26609#L2693 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 24541#L2385 assume !(1 == ~currentHeading~0); 24543#L2395 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24382#L2395-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25517#L2401-1 assume { :end_inline_continueInDirection } true; 23050#L2702-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 23051#L1766-1 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 25567#L242 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 25351#L243 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 23897#L1775 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 23898#L247 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 22515#L302 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 23578#L2717 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 23579#L1183-2 [2022-10-17 10:13:47,223 INFO L750 eck$LassoCheckResult]: Loop: 23579#L1183-2 assume !false; 23509#L1184 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 23510#L1187 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 23947#L1593 cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 22714#L1191 assume 1 != cleanup_~tmp___0~1#1; 22715#L1191-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 25106#L453-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 23002#L480-61 anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 22813#L1874 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 22814#L1938 isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 24999#L1951 cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 25332#L1203 assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 24811#L2447-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 24812#L1766-2 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 25586#L1783-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 24653#L1787-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 24655#L1804-2 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 25634#L2458-1 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 25632#L2594-2 assume !(0 != timeShift_~tmp___9~2#1); 25630#L2685-3 assume 1 == ~doorState~0;~doorState~0 := 0; 25628#L2685-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 25625#L2350-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 25621#L2371-2 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 25617#L2323-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 25618#L1970-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 25620#L2139-8 assume !(0 == ~currentFloorID~0); 25148#L2145-8 assume !(~currentFloorID~0 > 0); 24645#L2160-8 assume ~currentFloorID~0 > 0; 25140#L2162-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 24268#L2163-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 22385#L2292-8 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 26676#L2341-2 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 26674#L2693-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 26673#L2385-3 assume !(1 == ~currentHeading~0); 26672#L2395-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22652#L2395-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 22653#L2401-7 assume { :end_inline_continueInDirection } true; 24338#L2702-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 24215#L1766-3 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 23823#L242-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 23824#L243-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 25410#L1775-5 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 25450#L247-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 23192#L302-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 24594#L2717-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 23579#L1183-2 [2022-10-17 10:13:47,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:47,225 INFO L85 PathProgramCache]: Analyzing trace with hash -1420670844, now seen corresponding path program 1 times [2022-10-17 10:13:47,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:47,225 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [59709344] [2022-10-17 10:13:47,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:47,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:47,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:47,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:47,404 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:47,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [59709344] [2022-10-17 10:13:47,405 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [59709344] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:47,405 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:47,405 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:47,406 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684726485] [2022-10-17 10:13:47,406 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:47,406 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:47,407 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:47,407 INFO L85 PathProgramCache]: Analyzing trace with hash -663955134, now seen corresponding path program 1 times [2022-10-17 10:13:47,407 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:47,408 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009988223] [2022-10-17 10:13:47,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:47,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:47,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:47,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:47,538 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:47,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009988223] [2022-10-17 10:13:47,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009988223] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:47,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:47,539 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:13:47,539 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1882048486] [2022-10-17 10:13:47,540 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:47,540 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-10-17 10:13:47,540 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:13:47,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:13:47,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:13:47,541 INFO L87 Difference]: Start difference. First operand 4536 states and 8318 transitions. cyclomatic complexity: 3783 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:49,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:13:49,892 INFO L93 Difference]: Finished difference Result 12586 states and 22970 transitions. [2022-10-17 10:13:49,892 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12586 states and 22970 transitions. [2022-10-17 10:13:50,002 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 8416 [2022-10-17 10:13:50,127 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12586 states to 12560 states and 22944 transitions. [2022-10-17 10:13:50,127 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12560 [2022-10-17 10:13:50,151 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12560 [2022-10-17 10:13:50,151 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12560 states and 22944 transitions. [2022-10-17 10:13:50,176 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-10-17 10:13:50,176 INFO L218 hiAutomatonCegarLoop]: Abstraction has 12560 states and 22944 transitions. [2022-10-17 10:13:50,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12560 states and 22944 transitions. [2022-10-17 10:13:50,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12560 to 6947. [2022-10-17 10:13:50,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6947 states, 6947 states have (on average 1.8219375269900677) internal successors, (12657), 6946 states have internal predecessors, (12657), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:50,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6947 states to 6947 states and 12657 transitions. [2022-10-17 10:13:50,429 INFO L240 hiAutomatonCegarLoop]: Abstraction has 6947 states and 12657 transitions. [2022-10-17 10:13:50,429 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-17 10:13:50,431 INFO L428 stractBuchiCegarLoop]: Abstraction has 6947 states and 12657 transitions. [2022-10-17 10:13:50,431 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-10-17 10:13:50,431 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6947 states and 12657 transitions. [2022-10-17 10:13:50,465 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5509 [2022-10-17 10:13:50,466 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:50,466 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:50,474 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:50,474 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:50,476 INFO L748 eck$LassoCheckResult]: Stem: 42328#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 42329#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 42053#L1418 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 40662#L1411 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 39879#L1426 main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 39880#L1382 assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 40183#L1353 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 40184#L197 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 41679#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 40514#L120 bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 41984#L728 assume 0 == initPersonOnFloor_~floor#1; 39817#L729 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39754#L836-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 41186#L204 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 40830#L216-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 42615#L520 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 39602#L532-2 assume { :end_inline_callOnFloor } true; 42285#L872 assume { :end_inline_initPersonOnFloor } true; 42089#L1153 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 39664#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 39665#L120-1 angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 40784#L728-1 assume 0 == initPersonOnFloor_~floor#1; 41992#L729-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39532#L836-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 42379#L204-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 41403#L216-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 41404#L520-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 39878#L532-5 assume { :end_inline_callOnFloor } true; 40865#L872-1 assume { :end_inline_initPersonOnFloor } true; 41260#L1120 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 40330#L2447 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 40332#L1766 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 41409#L1783 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 40066#L1804 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 40067#L2458 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 41474#L2594 assume !(0 != timeShift_~tmp___9~2#1); 41475#L2685 assume !(1 == ~doorState~0); 39511#L2685-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 39512#L2350 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 39525#L2371 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 41925#L2323 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 40700#L1970-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 40702#L1031-2 stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1; 42580#L1974-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1); 42447#L1980-2 assume !(~currentFloorID~0 < 0); 41961#L1995-2 assume !(~currentFloorID~0 < 0); 41962#L2008-2 assume ~currentFloorID~0 < 1; 41095#L2010-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 40480#L453-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 39784#L480-22 stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1; 40811#L2014-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 41240#L2292-2 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 45342#L2341 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 45341#L2693 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 41694#L2385 assume !(1 == ~currentHeading~0); 41696#L2395 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41529#L2395-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42699#L2401-1 assume { :end_inline_continueInDirection } true; 41158#L2702-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 44099#L1766-1 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 44098#L242 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 44096#L243 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 44093#L1775 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 44084#L247 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 44078#L302 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 44077#L2717 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 44074#L1183-2 [2022-10-17 10:13:50,478 INFO L750 eck$LassoCheckResult]: Loop: 44074#L1183-2 assume !false; 44072#L1184 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 44071#L1187 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 44070#L1593 cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 44069#L1191 assume 1 != cleanup_~tmp___0~1#1; 44063#L1191-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 44054#L453-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 44042#L480-61 anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 44018#L1874 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 43996#L1938 isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 43993#L1951 cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 43990#L1203 assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 43933#L2447-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 41849#L453-66 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 39496#L480-66 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1; 42884#L2418-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~21#1; 42885#L2430-1 stopRequestedAtCurrentFloor_#t~ret60#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 44113#L2458-1 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 44101#L2594-2 assume !(0 != timeShift_~tmp___9~2#1); 44034#L2685-3 assume 1 == ~doorState~0;~doorState~0 := 0; 44033#L2685-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 44003#L2350-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 43995#L2371-2 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 43991#L2323-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 43992#L1970-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 44130#L2139-8 assume !(0 == ~currentFloorID~0); 42320#L2145-8 assume !(~currentFloorID~0 > 0); 41802#L2160-8 assume ~currentFloorID~0 > 0; 42312#L2162-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 41412#L2163-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 39522#L2292-8 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 46401#L2341-2 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 46400#L2693-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 45981#L2385-3 assume !(1 == ~currentHeading~0); 45980#L2395-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 39786#L2395-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 39787#L2401-7 assume { :end_inline_continueInDirection } true; 41483#L2702-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 44124#L1766-3 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 44122#L242-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 44121#L243-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 44120#L1775-5 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 44104#L247-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 44100#L302-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 44076#L2717-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 44074#L1183-2 [2022-10-17 10:13:50,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:50,479 INFO L85 PathProgramCache]: Analyzing trace with hash -1420670844, now seen corresponding path program 2 times [2022-10-17 10:13:50,480 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:50,480 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1952649621] [2022-10-17 10:13:50,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:50,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:50,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:50,631 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:50,631 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:50,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1952649621] [2022-10-17 10:13:50,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1952649621] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:50,632 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:50,633 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:50,633 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936575913] [2022-10-17 10:13:50,633 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:50,633 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:50,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:50,634 INFO L85 PathProgramCache]: Analyzing trace with hash 1637048613, now seen corresponding path program 1 times [2022-10-17 10:13:50,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:50,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [988300993] [2022-10-17 10:13:50,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:50,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:50,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:50,777 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:50,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:50,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [988300993] [2022-10-17 10:13:50,778 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [988300993] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:50,778 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:50,778 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:13:50,778 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765289278] [2022-10-17 10:13:50,779 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:50,779 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-10-17 10:13:50,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:13:50,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:13:50,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:13:50,783 INFO L87 Difference]: Start difference. First operand 6947 states and 12657 transitions. cyclomatic complexity: 5711 Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 7 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:51,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:13:51,292 INFO L93 Difference]: Finished difference Result 17253 states and 31617 transitions. [2022-10-17 10:13:51,292 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17253 states and 31617 transitions. [2022-10-17 10:13:51,389 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14904 [2022-10-17 10:13:51,482 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17253 states to 17253 states and 31617 transitions. [2022-10-17 10:13:51,483 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17253 [2022-10-17 10:13:51,512 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17253 [2022-10-17 10:13:51,512 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17253 states and 31617 transitions. [2022-10-17 10:13:51,533 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-10-17 10:13:51,533 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17253 states and 31617 transitions. [2022-10-17 10:13:51,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17253 states and 31617 transitions. [2022-10-17 10:13:51,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17253 to 6962. [2022-10-17 10:13:51,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6962 states, 6962 states have (on average 1.8201666187877046) internal successors, (12672), 6961 states have internal predecessors, (12672), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:51,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6962 states to 6962 states and 12672 transitions. [2022-10-17 10:13:51,791 INFO L240 hiAutomatonCegarLoop]: Abstraction has 6962 states and 12672 transitions. [2022-10-17 10:13:51,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-10-17 10:13:51,793 INFO L428 stractBuchiCegarLoop]: Abstraction has 6962 states and 12672 transitions. [2022-10-17 10:13:51,793 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-10-17 10:13:51,793 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6962 states and 12672 transitions. [2022-10-17 10:13:51,823 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5521 [2022-10-17 10:13:51,824 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:51,824 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:51,830 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:51,831 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:51,831 INFO L748 eck$LassoCheckResult]: Stem: 66562#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 66563#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 66285#L1418 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 64906#L1411 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 64115#L1426 main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 64116#L1382 assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 64422#L1353 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 64423#L197 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 65912#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 64757#L120 bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 66216#L728 assume 0 == initPersonOnFloor_~floor#1; 64052#L729 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 63987#L836-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 65427#L204 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 65075#L216-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 66850#L520 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 63838#L532-2 assume { :end_inline_callOnFloor } true; 66518#L872 assume { :end_inline_initPersonOnFloor } true; 66321#L1153 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 63900#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 63901#L120-1 angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 65029#L728-1 assume 0 == initPersonOnFloor_~floor#1; 66224#L729-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 63766#L836-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 66615#L204-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 65642#L216-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 65643#L520-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 64108#L532-5 assume { :end_inline_callOnFloor } true; 65110#L872-1 assume { :end_inline_initPersonOnFloor } true; 65500#L1120 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 64571#L2447 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 64573#L1766 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 65647#L1783 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 64304#L1804 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 64305#L2458 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 67023#L2594 assume !(0 != timeShift_~tmp___9~2#1); 66022#L2685 assume !(1 == ~doorState~0); 63747#L2685-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 63748#L2350 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 63761#L2371 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 66155#L2323 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 64944#L1970-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 64946#L1031-2 stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1; 66814#L1974-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1); 66684#L1980-2 assume !(~currentFloorID~0 < 0); 66193#L1995-2 assume !(~currentFloorID~0 < 0); 66194#L2008-2 assume ~currentFloorID~0 < 1; 65338#L2010-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 64723#L453-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 64017#L480-22 stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1; 65056#L2014-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 65481#L2292-2 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 67024#L2341 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 67022#L2693 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 65927#L2385 assume !(1 == ~currentHeading~0); 65929#L2395 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 65767#L2395-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 66933#L2401-1 assume { :end_inline_continueInDirection } true; 65401#L2702-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 69797#L1766-1 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 69796#L242 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 69794#L243 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 69791#L1775 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 69782#L247 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 69776#L302 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 64948#L2717 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 64949#L1183-2 [2022-10-17 10:13:51,832 INFO L750 eck$LassoCheckResult]: Loop: 64949#L1183-2 assume !false; 64880#L1184 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 64881#L1187 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 65325#L1593 cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 64085#L1191 assume 1 != cleanup_~tmp___0~1#1; 64086#L1191-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 66512#L453-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 64372#L480-61 anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 64185#L1874 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 64186#L1938 isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 66402#L1951 cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 67006#L1203 assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 67380#L2447-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 67381#L1766-2 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 67440#L1783-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 66043#L1787-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 66045#L1804-2 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 67335#L2458-1 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 67333#L2594-2 assume !(0 != timeShift_~tmp___9~2#1); 67332#L2685-3 assume 1 == ~doorState~0;~doorState~0 := 0; 67331#L2685-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 67329#L2350-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 67325#L2371-2 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 67323#L2323-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 67321#L1970-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 67316#L2139-8 assume !(0 == ~currentFloorID~0); 67314#L2145-8 assume ~currentFloorID~0 > 0; 67312#L2146-8 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1); 67310#L2160-8 assume ~currentFloorID~0 > 0; 67309#L2162-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 67307#L2163-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 67308#L2292-8 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 67626#L2341-2 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 67623#L2693-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 67614#L2385-3 assume !(1 == ~currentHeading~0); 67015#L2395-9 assume !(0 == ~currentFloorID~0); 64025#L2395-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 64026#L2401-7 assume { :end_inline_continueInDirection } true; 65721#L2702-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 65596#L1766-3 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 65201#L242-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 65202#L243-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 66826#L1775-5 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 66866#L247-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 64564#L302-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 65981#L2717-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 64949#L1183-2 [2022-10-17 10:13:51,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:51,833 INFO L85 PathProgramCache]: Analyzing trace with hash -1420670844, now seen corresponding path program 3 times [2022-10-17 10:13:51,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:51,834 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [79744297] [2022-10-17 10:13:51,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:51,834 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:51,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:51,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:51,918 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:51,919 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [79744297] [2022-10-17 10:13:51,919 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [79744297] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:51,919 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:51,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:51,920 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1931863866] [2022-10-17 10:13:51,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:51,920 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:51,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:51,921 INFO L85 PathProgramCache]: Analyzing trace with hash -415166121, now seen corresponding path program 1 times [2022-10-17 10:13:51,921 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:51,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135470419] [2022-10-17 10:13:51,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:51,922 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:51,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:52,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:52,001 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:52,001 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135470419] [2022-10-17 10:13:52,001 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135470419] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:52,002 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:52,002 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:13:52,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115915109] [2022-10-17 10:13:52,002 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:52,003 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-10-17 10:13:52,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:13:52,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:13:52,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:13:52,004 INFO L87 Difference]: Start difference. First operand 6962 states and 12672 transitions. cyclomatic complexity: 5711 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:52,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:13:52,755 INFO L93 Difference]: Finished difference Result 14396 states and 26212 transitions. [2022-10-17 10:13:52,755 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14396 states and 26212 transitions. [2022-10-17 10:13:52,846 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 12854 [2022-10-17 10:13:52,927 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14396 states to 14396 states and 26212 transitions. [2022-10-17 10:13:52,928 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14396 [2022-10-17 10:13:52,946 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14396 [2022-10-17 10:13:52,946 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14396 states and 26212 transitions. [2022-10-17 10:13:52,962 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-10-17 10:13:52,962 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14396 states and 26212 transitions. [2022-10-17 10:13:52,983 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14396 states and 26212 transitions. [2022-10-17 10:13:53,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14396 to 7122. [2022-10-17 10:13:53,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7122 states, 7122 states have (on average 1.8028643639427127) internal successors, (12840), 7121 states have internal predecessors, (12840), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:53,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7122 states to 7122 states and 12840 transitions. [2022-10-17 10:13:53,168 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7122 states and 12840 transitions. [2022-10-17 10:13:53,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-17 10:13:53,171 INFO L428 stractBuchiCegarLoop]: Abstraction has 7122 states and 12840 transitions. [2022-10-17 10:13:53,172 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-10-17 10:13:53,172 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7122 states and 12840 transitions. [2022-10-17 10:13:53,202 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5651 [2022-10-17 10:13:53,203 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:53,203 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:53,216 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:53,216 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:53,217 INFO L748 eck$LassoCheckResult]: Stem: 87942#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 87943#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 87655#L1418 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 86274#L1411 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 85490#L1426 main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 85491#L1382 assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 85795#L1353 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 85796#L197 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 87281#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 86127#L120 bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 87583#L728 assume 0 == initPersonOnFloor_~floor#1; 85427#L729 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 85362#L836-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 86790#L204 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 86439#L216-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 88247#L520 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 85214#L532-2 assume { :end_inline_callOnFloor } true; 87896#L872 assume { :end_inline_initPersonOnFloor } true; 87694#L1153 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 85276#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 85277#L120-1 angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 86393#L728-1 assume 0 == initPersonOnFloor_~floor#1; 87592#L729-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 85142#L836-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 87998#L204-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 87006#L216-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 87007#L520-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 85483#L532-5 assume { :end_inline_callOnFloor } true; 86473#L872-1 assume { :end_inline_initPersonOnFloor } true; 86863#L1120 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 85942#L2447 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 85944#L1766 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 87011#L1783 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 85678#L1804 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 85679#L2458 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 88537#L2594 assume !(0 != timeShift_~tmp___9~2#1); 87391#L2685 assume !(1 == ~doorState~0); 85123#L2685-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 85124#L2350 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 85137#L2371 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 87523#L2323 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 86310#L1970-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 86312#L1031-2 stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1; 88208#L1974-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1); 88072#L1980-2 assume !(~currentFloorID~0 < 0); 87561#L1995-2 assume !(~currentFloorID~0 < 0); 87562#L2008-2 assume ~currentFloorID~0 < 1; 86703#L2010-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 86093#L453-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 85391#L480-22 stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1; 86420#L2014-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 86844#L2292-2 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 88655#L2341 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 88652#L2693 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 87296#L2385 assume !(1 == ~currentHeading~0); 87298#L2395 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 87133#L2395-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88342#L2401-1 assume { :end_inline_continueInDirection } true; 85793#L2702-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 85794#L1766-1 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 88415#L242 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 88154#L243 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 86641#L1775 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 86642#L247 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 85258#L302 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 86314#L2717 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 86315#L1183-2 [2022-10-17 10:13:53,217 INFO L750 eck$LassoCheckResult]: Loop: 86315#L1183-2 assume !false; 86247#L1184 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 86248#L1187 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 86690#L1593 cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 85460#L1191 assume 1 != cleanup_~tmp___0~1#1; 85461#L1191-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 87891#L453-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 85746#L480-61 anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 85559#L1874 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 85560#L1938 isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 87783#L1951 cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 88132#L1203 assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 87574#L2447-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 87575#L1766-2 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 88613#L1783-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 88612#L1787-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 87414#L1804-2 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 88716#L2458-1 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 88700#L2594-2 assume !(0 != timeShift_~tmp___9~2#1); 88698#L2685-3 assume 1 == ~doorState~0;~doorState~0 := 0; 88696#L2685-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 88693#L2350-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 88687#L2371-2 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 88565#L2323-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 88563#L1970-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 88542#L2139-8 assume !(0 == ~currentFloorID~0); 87934#L2145-8 assume ~currentFloorID~0 > 0; 87402#L2146-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 87403#L453-92 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 86625#L480-92 stopRequestedInDirection__wrappee__empty_#t~ret46#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___9~0#1 := stopRequestedInDirection__wrappee__empty_#t~ret46#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret46#1; 88186#L2150-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 85543#L2292-8 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 92215#L2341-2 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 92214#L2693-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 87102#L2385-3 assume !(1 == ~currentHeading~0); 87104#L2395-9 assume !(0 == ~currentFloorID~0); 85399#L2395-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 85400#L2401-7 assume { :end_inline_continueInDirection } true; 87086#L2702-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 86960#L1766-3 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 86567#L242-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 86568#L243-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 88219#L1775-5 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 88268#L247-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 85935#L302-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 87350#L2717-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 86315#L1183-2 [2022-10-17 10:13:53,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:53,219 INFO L85 PathProgramCache]: Analyzing trace with hash -1420670844, now seen corresponding path program 4 times [2022-10-17 10:13:53,219 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:53,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [901830113] [2022-10-17 10:13:53,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:53,220 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:53,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:53,310 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:53,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:53,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [901830113] [2022-10-17 10:13:53,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [901830113] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:53,311 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:53,311 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:53,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [337453040] [2022-10-17 10:13:53,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:53,318 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:53,322 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:53,322 INFO L85 PathProgramCache]: Analyzing trace with hash 164538682, now seen corresponding path program 1 times [2022-10-17 10:13:53,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:53,323 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329181813] [2022-10-17 10:13:53,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:53,324 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:53,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:53,441 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:53,441 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:53,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329181813] [2022-10-17 10:13:53,442 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1329181813] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:53,442 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:53,442 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:13:53,442 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1720359152] [2022-10-17 10:13:53,442 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:53,443 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-10-17 10:13:53,443 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:13:53,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:13:53,444 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:13:53,444 INFO L87 Difference]: Start difference. First operand 7122 states and 12840 transitions. cyclomatic complexity: 5719 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:54,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:13:54,011 INFO L93 Difference]: Finished difference Result 20045 states and 36590 transitions. [2022-10-17 10:13:54,011 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20045 states and 36590 transitions. [2022-10-17 10:13:54,131 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 18270 [2022-10-17 10:13:54,229 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20045 states to 20022 states and 36552 transitions. [2022-10-17 10:13:54,230 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20022 [2022-10-17 10:13:54,259 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20022 [2022-10-17 10:13:54,259 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20022 states and 36552 transitions. [2022-10-17 10:13:54,281 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-10-17 10:13:54,281 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20022 states and 36552 transitions. [2022-10-17 10:13:54,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20022 states and 36552 transitions. [2022-10-17 10:13:54,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20022 to 12134. [2022-10-17 10:13:54,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12134 states, 12134 states have (on average 1.8075655183781112) internal successors, (21933), 12133 states have internal predecessors, (21933), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:54,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12134 states to 12134 states and 21933 transitions. [2022-10-17 10:13:54,556 INFO L240 hiAutomatonCegarLoop]: Abstraction has 12134 states and 21933 transitions. [2022-10-17 10:13:54,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:13:54,558 INFO L428 stractBuchiCegarLoop]: Abstraction has 12134 states and 21933 transitions. [2022-10-17 10:13:54,559 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-10-17 10:13:54,559 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12134 states and 21933 transitions. [2022-10-17 10:13:54,609 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10435 [2022-10-17 10:13:54,609 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:54,609 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:54,619 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:54,619 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:54,619 INFO L748 eck$LassoCheckResult]: Stem: 115163#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 115164#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 114875#L1418 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 113467#L1411 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 112677#L1426 main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 112678#L1382 assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 112982#L1353 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 112983#L197 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 114484#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 113319#L120 bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 114802#L728 assume 0 == initPersonOnFloor_~floor#1; 112615#L729 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 112552#L836-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 113990#L204 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 113632#L216-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 115487#L520 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 112401#L532-2 assume { :end_inline_callOnFloor } true; 115116#L872 assume { :end_inline_initPersonOnFloor } true; 114916#L1153 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 112463#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 112464#L120-1 angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 113586#L728-1 assume 0 == initPersonOnFloor_~floor#1; 114810#L729-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 112331#L836-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 115222#L204-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 114207#L216-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 114208#L520-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 112676#L532-5 assume { :end_inline_callOnFloor } true; 113667#L872-1 assume { :end_inline_initPersonOnFloor } true; 114064#L1120 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 113131#L2447 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 113133#L1766 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 114213#L1783 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 112866#L1804 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 112867#L2458 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 115774#L2594 assume !(0 != timeShift_~tmp___9~2#1); 114597#L2685 assume !(1 == ~doorState~0); 112310#L2685-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 112311#L2350 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 112324#L2371 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 114735#L2323 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 113504#L1970-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 113506#L1031-2 stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1; 115448#L1974-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1); 115295#L1980-2 assume !(~currentFloorID~0 < 0); 114778#L1995-2 assume !(~currentFloorID~0 < 0); 114779#L2008-2 assume ~currentFloorID~0 < 1; 113904#L2010-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 113285#L453-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 112582#L480-22 stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1; 113613#L2014-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 114044#L2292-2 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 115773#L2341 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 115771#L2693 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 114499#L2385 assume !(1 == ~currentHeading~0); 114501#L2395 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 114335#L2395-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 118053#L2401-1 assume { :end_inline_continueInDirection } true; 118050#L2702-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 118048#L1766-1 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 118045#L242 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 118046#L243 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 118047#L1775 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 116916#L247 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 116909#L302 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 116908#L2717 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 116906#L1183-2 [2022-10-17 10:13:54,620 INFO L750 eck$LassoCheckResult]: Loop: 116906#L1183-2 assume !false; 116905#L1184 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 116904#L1187 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 116903#L1593 cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 116902#L1191 assume 1 != cleanup_~tmp___0~1#1; 116901#L1191-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 116896#L453-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 116893#L480-61 anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 116478#L1874 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 116464#L1938 isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 116463#L1951 cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 116462#L1203 assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 116456#L2447-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 116454#L1766-2 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 116451#L1783-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 116448#L1787-2 assume !(1 == buttonForFloorIsPressed_~floorID#1); 116439#L1791-2 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 116435#L1804-2 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 116434#L2458-1 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 116432#L2594-2 assume !(0 != timeShift_~tmp___9~2#1); 116431#L2685-3 assume 1 == ~doorState~0;~doorState~0 := 0; 116430#L2685-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 116197#L2350-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 116143#L2371-2 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 116022#L2323-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 116021#L1970-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 115980#L2139-8 assume !(0 == ~currentFloorID~0); 115979#L2145-8 assume !(~currentFloorID~0 > 0); 115143#L2160-8 assume ~currentFloorID~0 > 0; 115144#L2162-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 114217#L2163-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 113079#L2292-8 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 119688#L2341-2 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 116899#L2693-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 116900#L2385-3 assume !(1 == ~currentHeading~0); 116959#L2395-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 113863#L2395-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 116944#L2401-7 assume { :end_inline_continueInDirection } true; 116943#L2702-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 116942#L1766-3 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 116941#L242-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 116939#L243-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 116940#L1775-5 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 116924#L247-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 116910#L302-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 116907#L2717-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 116906#L1183-2 [2022-10-17 10:13:54,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:54,621 INFO L85 PathProgramCache]: Analyzing trace with hash -1027643834, now seen corresponding path program 1 times [2022-10-17 10:13:54,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:54,622 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1894548030] [2022-10-17 10:13:54,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:54,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:54,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:54,721 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:54,721 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:54,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1894548030] [2022-10-17 10:13:54,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1894548030] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:54,722 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:54,722 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:54,723 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [516035070] [2022-10-17 10:13:54,723 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:54,723 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:54,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:54,724 INFO L85 PathProgramCache]: Analyzing trace with hash 710317783, now seen corresponding path program 1 times [2022-10-17 10:13:54,724 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:54,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2098131074] [2022-10-17 10:13:54,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:54,725 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:54,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:54,854 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:54,854 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:54,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2098131074] [2022-10-17 10:13:54,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2098131074] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:54,855 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:54,855 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:13:54,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823171078] [2022-10-17 10:13:54,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:54,856 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-10-17 10:13:54,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:13:54,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:13:54,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:13:54,857 INFO L87 Difference]: Start difference. First operand 12134 states and 21933 transitions. cyclomatic complexity: 9801 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:56,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:13:56,452 INFO L93 Difference]: Finished difference Result 26275 states and 47642 transitions. [2022-10-17 10:13:56,452 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26275 states and 47642 transitions. [2022-10-17 10:13:56,614 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 22101 [2022-10-17 10:13:56,787 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26275 states to 26182 states and 47531 transitions. [2022-10-17 10:13:56,787 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26182 [2022-10-17 10:13:56,824 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26182 [2022-10-17 10:13:56,824 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26182 states and 47531 transitions. [2022-10-17 10:13:56,857 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-10-17 10:13:56,857 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26182 states and 47531 transitions. [2022-10-17 10:13:56,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26182 states and 47531 transitions. [2022-10-17 10:13:57,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26182 to 16702. [2022-10-17 10:13:57,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16702 states, 16702 states have (on average 1.8081666866243564) internal successors, (30200), 16701 states have internal predecessors, (30200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:13:57,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16702 states to 16702 states and 30200 transitions. [2022-10-17 10:13:57,231 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16702 states and 30200 transitions. [2022-10-17 10:13:57,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-17 10:13:57,234 INFO L428 stractBuchiCegarLoop]: Abstraction has 16702 states and 30200 transitions. [2022-10-17 10:13:57,235 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-10-17 10:13:57,235 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16702 states and 30200 transitions. [2022-10-17 10:13:57,302 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15003 [2022-10-17 10:13:57,302 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-10-17 10:13:57,302 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-10-17 10:13:57,317 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:57,317 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:13:57,322 INFO L748 eck$LassoCheckResult]: Stem: 153580#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 153581#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret23#1, main_~retValue_acc~7#1, main_~tmp~9#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~9#1;assume { :begin_inline_select_helpers } true; 153286#L1418 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 151884#L1411 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 151097#L1426 main_#t~ret23#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~9#1 := main_#t~ret23#1;havoc main_#t~ret23#1; 151098#L1382 assume 0 != main_~tmp~9#1;assume { :begin_inline_setup } true; 151401#L1353 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 151402#L197 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret16#1, bigMacCall_~tmp~6#1;havoc bigMacCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 152898#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 151736#L120 bigMacCall_#t~ret16#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~6#1 := bigMacCall_#t~ret16#1;havoc bigMacCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 153214#L728 assume 0 == initPersonOnFloor_~floor#1; 151035#L729 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 150973#L836-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 152404#L204 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 152048#L216-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 153895#L520 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 150821#L532-2 assume { :end_inline_callOnFloor } true; 153533#L872 assume { :end_inline_initPersonOnFloor } true; 153325#L1153 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret13#1, angelinaCall_~tmp~3#1;havoc angelinaCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 150883#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 150884#L120-1 angelinaCall_#t~ret13#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~3#1 := angelinaCall_#t~ret13#1;havoc angelinaCall_#t~ret13#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 152001#L728-1 assume 0 == initPersonOnFloor_~floor#1; 153221#L729-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 150751#L836-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 153641#L204-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 152622#L216-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 152623#L520-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 151096#L532-5 assume { :end_inline_callOnFloor } true; 152082#L872-1 assume { :end_inline_initPersonOnFloor } true; 152479#L1120 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret17#1, cleanup_#t~ret18#1, cleanup_~i~0#1, cleanup_~tmp~7#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~7#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 151548#L2447 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 151550#L1766 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 152628#L1783 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 151285#L1804 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 151286#L2458 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 154404#L2594 assume !(0 != timeShift_~tmp___9~2#1); 153009#L2685 assume !(1 == ~doorState~0); 150730#L2685-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 150731#L2350 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 150744#L2371 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 153146#L2323 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 151920#L1970-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 151922#L1031-2 stopRequestedInDirection__wrappee__empty_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~17#1 := stopRequestedInDirection__wrappee__empty_#t~ret40#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1; 153856#L1974-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~17#1); 153711#L1980-2 assume !(~currentFloorID~0 < 0); 153190#L1995-2 assume !(~currentFloorID~0 < 0); 153191#L2008-2 assume ~currentFloorID~0 < 1; 152317#L2010-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 151702#L453-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 151002#L480-22 stopRequestedInDirection__wrappee__empty_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret42#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret42#1; 152028#L2014-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 152459#L2292-2 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 155463#L2341 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 154382#L2693 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 152913#L2385 assume !(1 == ~currentHeading~0); 152915#L2395 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 152749#L2395-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 154017#L2401-1 assume { :end_inline_continueInDirection } true; 151399#L2702-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 151400#L1766-1 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 154075#L242 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 153799#L243 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 152253#L1775 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 152254#L247 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 150868#L302 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 151927#L2717 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 151928#L1183-2 [2022-10-17 10:13:57,323 INFO L750 eck$LassoCheckResult]: Loop: 151928#L1183-2 assume !false; 157123#L1184 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 157118#L1187 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 157116#L1593 cleanup_#t~ret17#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret17#1;havoc cleanup_#t~ret17#1; 157115#L1191 assume 1 != cleanup_~tmp___0~1#1; 157114#L1191-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret39#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret34#1, anyStopRequested_#t~ret35#1, anyStopRequested_#t~ret36#1, anyStopRequested_#t~ret37#1, anyStopRequested_#t~ret38#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 157107#L453-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 157103#L480-61 anyStopRequested_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret34#1;havoc anyStopRequested_#t~ret34#1; 157102#L1874 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 157088#L1938 isIdle_#t~ret39#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret39#1;havoc isIdle_#t~ret39#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 157087#L1951 cleanup_#t~ret18#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~7#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 157086#L1203 assume !(0 != cleanup_~tmp~7#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_~tmp~23#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1, stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_~retValue_acc~22#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~22#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 157085#L2447-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 154258#L1766-2 stopRequestedAtCurrentFloor_#t~ret58#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret58#1;havoc stopRequestedAtCurrentFloor_#t~ret58#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~21#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 154241#L1783-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 154232#L1787-2 assume !(1 == buttonForFloorIsPressed_~floorID#1); 154224#L1791-2 assume !(2 == buttonForFloorIsPressed_~floorID#1); 154218#L1795-2 assume 3 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_3~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 154211#L1804-2 stopRequestedAtCurrentFloor_#t~ret59#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1;stopRequestedAtCurrentFloor_~retValue_acc~22#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~22#1; 154208#L2458-1 timeShift_#t~ret73#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret73#1;havoc timeShift_#t~ret73#1; 154198#L2594-2 assume !(0 != timeShift_~tmp___9~2#1); 154190#L2685-3 assume 1 == ~doorState~0;~doorState~0 := 0; 154183#L2685-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~19#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~19#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1;havoc isAnyLiftButtonPressed_~retValue_acc~20#1; 154175#L2350-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~20#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~20#1; 154167#L2371-2 stopRequestedInDirection_#t~ret51#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~18#1; 154161#L2323-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_#t~ret47#1, stopRequestedInDirection__wrappee__empty_#t~ret48#1, stopRequestedInDirection__wrappee__empty_#t~ret49#1, stopRequestedInDirection__wrappee__empty_#t~ret50#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1, stopRequestedInDirection__wrappee__empty_~tmp~17#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~17#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 154162#L1970-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 154262#L2139-8 assume !(0 == ~currentFloorID~0); 154251#L2145-8 assume !(~currentFloorID~0 > 0); 154239#L2160-8 assume ~currentFloorID~0 > 0; 154238#L2162-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 154237#L2163-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~18#1; 151497#L2292-8 stopRequestedInDirection_#t~ret54#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~19#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~19#1; 159442#L2341-2 timeShift_#t~ret80#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret80#1;havoc timeShift_#t~ret80#1; 159428#L2693-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret55#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 156564#L2385-3 assume !(1 == ~currentHeading~0); 156563#L2395-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 152275#L2395-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 153733#L2401-7 assume { :end_inline_continueInDirection } true; 152701#L2702-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret4#1, __utac_acc__Specification1_spec__3_#t~ret5#1, __utac_acc__Specification1_spec__3_#t~ret6#1, __utac_acc__Specification1_spec__3_#t~ret7#1, __utac_acc__Specification1_spec__3_#t~ret8#1, __utac_acc__Specification1_spec__3_#t~ret9#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~0#1, __utac_acc__Specification1_spec__3_~tmp___0~0#1, __utac_acc__Specification1_spec__3_~tmp___1~0#1, __utac_acc__Specification1_spec__3_~tmp___2~0#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 157146#L1766-3 __utac_acc__Specification1_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~0#1 := __utac_acc__Specification1_spec__3_#t~ret4#1;havoc __utac_acc__Specification1_spec__3_#t~ret4#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~0#1; 157145#L242-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 157143#L243-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 157144#L1775-5 __utac_acc__Specification1_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret5#1;havoc __utac_acc__Specification1_spec__3_#t~ret5#1; 157128#L247-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 157125#L302-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 157124#L2717-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 151928#L1183-2 [2022-10-17 10:13:57,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:57,324 INFO L85 PathProgramCache]: Analyzing trace with hash -1027643834, now seen corresponding path program 2 times [2022-10-17 10:13:57,324 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:57,325 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [739337010] [2022-10-17 10:13:57,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:57,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:57,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:13:57,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:13:57,420 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:13:57,421 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [739337010] [2022-10-17 10:13:57,426 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [739337010] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:13:57,427 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:13:57,427 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:13:57,427 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [190840773] [2022-10-17 10:13:57,430 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:13:57,430 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-10-17 10:13:57,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:13:57,431 INFO L85 PathProgramCache]: Analyzing trace with hash 419685885, now seen corresponding path program 1 times [2022-10-17 10:13:57,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:13:57,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7485352] [2022-10-17 10:13:57,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:13:57,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:13:57,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat